Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1
A published security advisory; the vulnerabilities below are the ones it describes.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-6916US | — | — | ||
Audit records for OpenAPI requests may include sensitive information.
This could lead to unauthorized accesses and privilege escalation. | ||||
remediations (4)
- MitigationCMC
Nozomi Networks recommends creating specific users for OpenAPI usage, with only the necessary permissions to access the required data sources. Additionally, it is advised to limit API keys to allowed IP addresses whenever possible. Finally, it is also suggested to regenerate existing API keys periodically and to review sign-ins via API keys in the audit records.
- MitigationGuardian
Nozomi Networks recommends creating specific users for OpenAPI usage, with only the necessary permissions to access the required data sources. Additionally, it is advised to limit API keys to allowed IP addresses whenever possible. Finally, it is also suggested to regenerate existing API keys periodically and to review sign-ins via API keys in the audit records.
- FixedCMC
Upgrade to v23.4.1 or later.
- FixedGuardian
Upgrade to v23.4.1 or later.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan