Apache Tomcat Version Disclosure Vulnerability in Dell NetWorker
CVE-2023-25544

6.5MEDIUM

Key Information:

Vendor
Dell
Status
Dell NetWorker, NVE
Vendor
CVE Published:
1 March 2023

Summary

Dell NetWorker versions 19.5 and earlier exhibit a vulnerability related to version disclosure of Apache Tomcat. This flaw allows users with remote access to the NetWorker clients to potentially exploit the weakness, leading to targeted attacks specific to the disclosed version. Awareness of this vulnerability is crucial for system administrators and security professionals to safeguard their environments and mitigate risks associated with unauthorized access.

Affected Version(s)

Dell NetWorker, NVE 19.5 and earlier versions

References

https://www.dell.com/support/kbdoc/en-us/000210471/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.