Improper validation of certificate with host mismatch in NetWorker - CVE-2023-24568

Vulnerability details

The vulnerability allows a remote user to modify files on the system.

The vulnerability exists in the Rabbitmq port. A remote user can trigger the vulnerability to disallow replacing CA signed certificates.

Affected software

How to mitigate CVE-2023-24568

External References

• https://www.dell.com/support/kbdoc/en-us/000210963/dsa-2023-059-dell-networker-security-update-for-a-rabbitmq-vulnerability-related-to-improper-validation-of-hostname-in-rabbitmq-startup-script-which-fails-to-replace-ca-signed-certificates

Related Security Bulletins

• Improper validation of certificate with host mismatch in Dell NetWorker