CVE-2023-38404 File upload in n/a
An authenticated attacker can upload malicious files to the XPRTLD web application to execute arbitrary commands on the server.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-38404?
CVE-2023-38404 is a high-severity vulnerability in n/a, published on 17 Jul 2023. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The XPRTLD web application in Veritas InfoScale Operations Manager (VIOM) before 8.0.0.410 allows an authenticated attacker to upload all types of files to the server. An authenticated attacker can then execute the malicious file to perform command execution on the remote server.
Weakness: CWE-434
Which versions are affected by CVE-2023-38404?
It affects 1 product.
Products include Veritas Infoscale Operations Manager.
How do I fix CVE-2023-38404?
No fix has been published for CVE-2023-38404 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-38404 being exploited?
There is no known exploitation of CVE-2023-38404 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-jf7v-xm37-v23m.