CVE-2023-6263 | BDVDB-2026-217540 Detail
Network OptixNxCloud
Description#
An issue was discovered by IPVM team in Network Optix NxCloud before 23.1.0.40440. It was possible to add a fake VMS server to NxCloud by using the exact identification of a legitimate VMS server. As result, it was possible to retrieve authorization headers from legitimate users when the legitimate client connects to the fake VMS server.
Impact#
CAPEC-115 Authentication Bypass
Weaknesses#
- CWE-290 Authentication Bypass by Spoofing
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.