Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-32568

An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x before 8.0.410. The VIOM web application does not validate user-supplied data and appends it to OS commands and internal binaries used by the application. An attacker with root/administrator level privileges can leverage this to read sensitive data stored on the servers, modify data or server configuration, and delete data or application configuration.

Published

2023-05-10T05:15:11.990

Last Modified

2025-01-28T16:15:35.987

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.2 (HIGH)

Weaknesses
  • Type: Primary
    CWE-78
  • Type: Secondary
    CWE-78
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application veritas infoscale_operations_manager < 7.4.2.800 Yes
Application veritas infoscale_operations_manager < 8.0.410 Yes
References