CVE-2023-23128: Medium severity connectwise manage vulnerability
DISPUTED Connectwise Control 22.8.10013.8329 is vulnerable to Cross Origin Resource Sharing (CORS). The vendor's position is that two endpoints have Access-Control-Allow-Origin wildcarding to support product functionality, and that there is no risk from this behavior. The vulnerability report is thus not valid.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-23128?
The severity of CVE-2023-23128 has not been officially classified, as the vendor disputes any risk presented by the vulnerability.
How do I fix CVE-2023-23128?
The vendor recommends utilizing the built-in security features and confirms that no immediate action is required for users of Connectwise Control 22.8.10013.8329.
What functionality is affected by CVE-2023-23128?
CVE-2023-23128 potentially impacts Cross Origin Resource Sharing (CORS) functionality in Connectwise Control 22.8.10013.8329.
Is CVE-2023-23128 actively being exploited?
Currently, there is no evidence or reports indicating that CVE-2023-23128 is being actively exploited in the wild.
Should I be concerned about CVE-2023-23128?
While the vendor asserts that there is no risk associated with CVE-2023-23128, administrators should remain vigilant and monitor for any updates from Connectwise.