Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2023-23903

DoS via SAML configuration in Guardian/CMC before 22.6.2

Description

An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the correct file format. Every subsequent application request will return an error. The whole application in rendered unusable until a console intervention.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nozomi Networks Guardian

Default version status: unaffected

  • 0 to < 22.6.2affected

Nozomi Networks CMC

Default version status: unaffected

  • 0 to < 22.6.2affected

References