Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server (backend). This affects WithSecure Policy Manager 15 and Policy Manager Proxy 15.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| F-secure_policy_manager | Withsecure | 15.00 (including) | 15.00 (including) |
| Policy_manager_proxy | Withsecure | 15.00 (including) | 15.00 (including) |
References
- https://www.withsecure.com/en/support/security-advisories
- https://www.withsecure.com/en/support/security-advisories/cve-2023-43762
- https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn511
- https://www.withsecure.com/en/support/security-advisories
- https://www.withsecure.com/en/support/security-advisories/cve-2023-43762
- https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn511