CVE-2023-5183: Authenticated RCE due to unsafe JSON deserialization
Unsafe deserialization of untrusted JSON allows execution of arbitrary code on affected releases of the Illumio PCE. Authentication to the API is required to exploit this vulnerability. The flaw exists within the networktraffic API endpoint. An attacker can leverage this vulnerability to execute code in the context of the PCE’s operating system user.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-5183?
CVE-2023-5183 is a vulnerability that allows for the unsafe deserialization of untrusted JSON, which can lead to the execution of arbitrary code on affected releases of the Illumio PCE.
What is the severity of CVE-2023-5183?
CVE-2023-5183 has a severity rating of 8.8 (Critical).
How does CVE-2023-5183 affect Illumio Core Policy Compute Engine?
CVE-2023-5183 affects certain versions of the Illumio Core Policy Compute Engine, specifically versions up to 19.3.7, between 21.2.0 and 21.2.8, between 21.5.0 and 21.5.36, between 22.2.0 and 22.2.42, between 22.5.0 and 22.5.31, and between 23.2.0 and 23.2.11.
What can an attacker do with CVE-2023-5183?
With CVE-2023-5183, an attacker can leverage the vulnerability to execute arbitrary code by exploiting the network_traffic API endpoint of the Illumio PCE. However, authentication to the API is required.
How can the vulnerability be fixed?
To fix CVE-2023-5183, users should update their Illumio Core Policy Compute Engine to a version that is not affected by the vulnerability.