New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2023-33295

NVDCIRCLENISA

EUVD-2023-37458 · Published Jan 19, 2024

Cohesity DataProtect prior to 6.8.1_u5 or 7.1 was discovered to have a incorrect access control vulnerability due to a lack of TLS Certificate Validation.

Technologies

Cohesity Cohesity Dataplatform

Weaknesses

CWE-295

CVSS scores

  • v3.16.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot