DSA-2023-059: Dell NetWorker Security Update for an Improper Validation Vulnerability

Samenvatting: Dell NetWorker remediation is available for an improper validation vulnerability that could be exploited by malicious users to compromise the affected system.

Dit artikel is van toepassing op Dit artikel is niet van toepassing op Dit artikel is niet gebonden aan een specifiek product. Niet alle productversies worden in dit artikel vermeld.

Impact

High

Gegevens

Proprietary Code CVE(s) Description CVSS Base Score CVSS Vector String
CVE-2023-24568 Dell NetWorker, contains an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port which could disallow replacing CA signed certificates. 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:NThis hyperlink is taking you to a website outside of Dell Technologies.
Proprietary Code CVE(s) Description CVSS Base Score CVSS Vector String
CVE-2023-24568 Dell NetWorker, contains an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port which could disallow replacing CA signed certificates. 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:NThis hyperlink is taking you to a website outside of Dell Technologies.
Dell Technologies raadt aan dat alle klanten rekening houden met zowel de basisscore van CVSS als alle relevante tijdelijke en omgevingsscores die gevolgen kunnen hebben voor de mogelijke ernst van de specifieke beveiligingsproblemen.

Getroffen producten en herstel

CVE Addressed Product Affected Version(s) Updated Version(s) Link to Update
CVE-2023-24568 Dell NetWorker
 
19.8.0.0, 19.7.0.3 and prior releases,
19.7.1
19.8.0.1 & Later releases

19.7.0.4 & Later releases


https://www.dell.com/support/home/product-support/product/networker/drivers
 
 
CVE Addressed Product Affected Version(s) Updated Version(s) Link to Update
CVE-2023-24568 Dell NetWorker
 
19.8.0.0, 19.7.0.3 and prior releases,
19.7.1
19.8.0.1 & Later releases

19.7.0.4 & Later releases


https://www.dell.com/support/home/product-support/product/networker/drivers
 
 
NW server impacted with this vulnerability and applicable platforms are windows and linux.

Revisiegeschiedenis

RevisionDateDescription
1.02023-04-03Initial Release
2.02023-05-11Made changes to the Updated Versions
3.02023-07-20Made changes to "CVSS Base Score" and "CVSS Vector String" under "Proprietary Code" section

Verwante informatie

Getroffen producten

NetWorker Family, NetWorker, NetWorker Series, NetWorker Module, Product Security Information
Artikeleigenschappen
Artikelnummer: 000210963
Artikeltype: Dell Security Advisory
Laatst aangepast: 09 sep. 2025
Vind antwoorden op uw vragen via andere Dell gebruikers
Support Services
Controleer of uw apparaat wordt gedekt door Support Services.