CVE-2023-33295 : Cohesity DataProtect prior to 6.8.1_u5 or 7.1 was discovered to have a incorrect

Cohesity DataProtect prior to 6.8.1_u5 or 7.1 was discovered to have a incorrect access control vulnerability due to a lack of TLS Certificate Validation.

Published 2024-01-19 20:15:11

Updated 2024-01-30 14:29:36

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2023-33295

Cohesity » Cohesity Dataplatform
Versions up to, including, (<=) 7.0.1
cpe:2.3:a:cohesity:cohesity_dataplatform:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2023-33295

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 15 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-33295

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	2.8	3.6	NIST	2024-01-30
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

References for CVE-2023-33295

https://github.com/cohesity/SecAdvisory/blob/master/CVE-2023-33295.md

SecAdvisory/CVE-2023-33295.md at master · cohesity/SecAdvisory · GitHub
Third Party Advisory
https://cohesity.com

AI-powered data security and management | Cohesity
Product

Jump to

Vulnerability Details : CVE-2023-33295

Products affected by CVE-2023-33295

Exploit prediction scoring system (EPSS) score for CVE-2023-33295

CVSS scores for CVE-2023-33295

References for CVE-2023-33295