← CVE Intelligence

CVE-2023-5183

Authenticated RCE due to unsafe JSON deserialization PUBLISHED

Description (CNA)

Unsafe deserialization of untrusted JSON allows execution of arbitrary code on affected releases of the Illumio PCE. Authentication to the API is required to exploit this vulnerability. The flaw exists within the network_traffic API endpoint. An attacker can leverage this vulnerability to execute code in the context of the PCE’s operating system user.  

Affected (CNA)

Vendor / productVersions
Illumio / Core PCEaffected 19.3.0 through 19.3.6; affected 21.2.0 through 21.2.7; affected 21.5.0 through 21.5.35; affected 22.2.0 through 22.2.41; affected 22.5.0 through 22.5.30; affected 23.2.0 through 23.2.10

CWE

CWE-502

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.