CVE-2023-43320: High severity proxmox backup vulnerability
An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxmox Mail Gateway v.7.1 thru v.8.0 allows a remote authenticated attacker to escalate privileges via bypassing the two-factor authentication component.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-43320.
What software versions are affected by this vulnerability?
This vulnerability affects Proxmox VE versions 5.4 through 8.0, Proxmox Backup Server versions 1.1 through 3.0, and Proxmox Mail Gateway versions 7.1 through 8.0.
What is the severity of CVE-2023-43320?
The severity of CVE-2023-43320 is high with a CVSS score of 8.8.
How can an attacker exploit this vulnerability?
A remote authenticated attacker can exploit this vulnerability by bypassing the two-factor authentication component.
Are there any references available for this vulnerability?
Yes, you can find more details about this vulnerability in the following references: [Reference 1](https://bugzilla.proxmox.com/show_bug.cgi?id=4579), [Reference 2](https://bugzilla.proxmox.com/show_bug.cgi?id=4584), [Reference 3](https://github.com/proxmox/proxmox-rs/commit/50b793db8d3421bbfe2bce060a486263f18a90cb).