CVE-2023-43762: Critical severity f-secure policy manager vulnerability
Published Sep 22, 2023
·Updated
Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server (backend). This affects WithSecure Policy Manager 15 and Policy Manager Proxy 15.
Affected Software
4 affected components
WithSecure F-secure Policy Manager Linux Kernel=15.00
WithSecure F-secure Policy Manager Windows=15.00
WithSecure Policy Manager Proxy Linux Kernel=15.00
WithSecure Policy Manager Proxy Windows=15.00
Event History
Sep 22, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2023-43762?
CVE-2023-43762 is a vulnerability in Certain WithSecure products that allows unauthenticated remote code execution via the web server.
2
Which products are affected by CVE-2023-43762?
CVE-2023-43762 affects WithSecure Policy Manager 15 and Policy Manager Proxy 15.
3
What is the severity of CVE-2023-43762?
The severity of CVE-2023-43762 is critical with a CVSS score of 9.8.
4
How can I fix CVE-2023-43762?
To fix CVE-2023-43762, it is recommended to apply the necessary updates or patches provided by WithSecure.
5
Where can I find more information about CVE-2023-43762?
More information about CVE-2023-43762 can be found in the security advisories on the WithSecure website.