Apache Tomcat Version Disclosure Vulnerability in Dell NetWorker
CVE-2023-25544

7.5HIGH

Key Information:

Vendor

Dell
Status
Dell Networker, Nve
Vendor
CVE Published:
1 March 2023

What is CVE-2023-25544?

Dell NetWorker versions 19.5 and earlier exhibit a vulnerability related to version disclosure of Apache Tomcat. This flaw allows users with remote access to the NetWorker clients to potentially exploit the weakness, leading to targeted attacks specific to the disclosed version. Awareness of this vulnerability is crucial for system administrators and security professionals to safeguard their environments and mitigate risks associated with unauthorized access.

Affected Version(s)

Dell NetWorker, NVE 19.5 and earlier versions

References

https://www.dell.com/support/kbdoc/en-us/000210471/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.