CVE-2023-23953 Privilege escalation in Advanced Secure Gateway, Content Analysis
Attackers can elevate privileges in Advanced Secure Gateway and Content Analysis products, requiring an upgrade to mitigate.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-23953?
CVE-2023-23953 is a high-severity vulnerability in Advanced Secure Gateway, Content Analysis, published on 1 Jun 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to an Elevation of Privilege vulnerability.
Which versions are affected by CVE-2023-23953?
It affects 2 products.
Products include Broadcom Advanced Secure Gateway, Broadcom Content Analysis.
How do I fix CVE-2023-23953?
No fix has been published for CVE-2023-23953 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-23953 being exploited?
There is no known exploitation of CVE-2023-23953 in the wild and no public exploit code.
Other vulnerabilities in Advanced Secure Gateway, Content Analysis
- CVE-2023-23952 Command injection in Advanced Secure Gateway, Content Analysis
- CVE-2018-5241 Auth bypass in Advanced Secure Gateway (ASG)
- CVE-2021-46825 Other in Advance Secure Gateway and ProxySG
- CVE-2023-23955 Server-side request forgery in Advanced Secure Gateway, Content Analysis
- CVE-2016-9100 Information disclosure in ASG
Sources
Also known as GHSA-vr42-2w5h-cfjp.