CVE-2023-4669 - Authentication Bypass in Exagate SYSGuard 3001

CRITICAL

Authentication Bypass in Exagate SYSGuard 3001

Published Sep 14, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 1.21%

Authentication Bypass by Assumed-Immutable Data vulnerability in Exagate SYSGuard 3001 allows Authentication Bypass.

This issue affects SYSGuard 3001: before 3.2.20.0.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
0	affected	<3.2.20.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
0	affected	<3.2.20.0

No remediation recorded yet.

Weaknesses (2)

CWE-287

Improper Authentication

CWE-302

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54521		Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0525		government-resource
https://www.usom.gov.tr/bildirim/tr-23-0525		government-resourcebroken-linkThird Party Advisory