What is CVE-2023-7248?

CVE-2023-7248 is a medium-severity vulnerability in Opentext Vertica, classified under Improper Input Validation. CVSS score: 5.0/10. Published 2024-03-15.

How severe is CVE-2023-7248?

Medium severity. CVSS v3 base score is 5.0 out of 10.

Is CVE-2023-7248 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Opentext Vertica

CVE-2023-7248

Certain functionality in OpenText Vertica Management console might be prone to bypass via crafted requests. The vulnerability would affect one of Vertica’s authentication functionalities by allowing specially crafted requests and sequences. This issue impacts the following Vertica Management Console versions: 10.x 11.1.1-24 or lower 12.0.4-18 or lower Please upgrade to one of the following Vertica Management Console versions: 10.x to upgrade to latest versions from below. 11.1.1-25 12.0.4-19 23.x 24.x

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.003 (24.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.0 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L.

Affected products

Opentext Vertica
Opentext Vertica Management Console — versions 10.x, 11.x, 12.x

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

NaInSec/CVE-LIST

References

security@opentext.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-7248?: CVE-2023-7248 is a medium-severity vulnerability in Opentext Vertica, classified under Improper Input Validation. CVSS score: 5.0/10. Published 2024-03-15.
How severe is CVE-2023-7248?: Medium severity. CVSS v3 base score is 5.0 out of 10.
Is CVE-2023-7248 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.