CVE-2023-33295: Medium severity Cohesity Cohesity DataPlatform vulnerability
Published Jan 19, 2024
·Updated
Cohesity DataProtect prior to 6.8.1u5 or 7.1 was discovered to have a incorrect access control vulnerability due to a lack of TLS Certificate Validation.
Affected Software
1 affected component
Cohesity Cohesity DataPlatform<=7.0.1
Event History
Jan 19, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-33295?
CVE-2023-33295 has been classified as a critical severity vulnerability due to incorrect access control.
2
How do I fix CVE-2023-33295?
To fix CVE-2023-33295, upgrade to Cohesity DataProtect version 6.8.1_u5 or 7.1 or later.
3
What causes CVE-2023-33295?
CVE-2023-33295 is caused by a lack of TLS Certificate Validation, which leads to improper access control.
4
Which versions of Cohesity DataProtect are affected by CVE-2023-33295?
CVE-2023-33295 affects all versions of Cohesity DataProtect prior to 6.8.1_u5 and version 7.0.1 or earlier.
5
Is it safe to continue using affected versions of Cohesity DataProtect with CVE-2023-33295?
It is not safe to continue using affected versions, as this vulnerability may allow unauthorized access to sensitive data.