CVE-2023-20237
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
A vulnerability in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent attacker to access internal HTTP services that are otherwise inaccessible. This vulnerability is due to insufficient restrictions on internally accessible http proxies. An attacker could exploit this vulnerability by submitting a crafted CLI command. A successful exploit could allow the attacker access to internal subnets beyond the sphere of their intended access level.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Cisco Intersight Virtual Appliance
- Vendor
- Cisco
- Product
- Cisco Intersight Virtual Appliance
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1.0.9-503 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.9-536 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.9-538 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.9-558 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.9-561 | affected | Unavailable | Unavailable | Unavailable | None listed |