← CVE Intelligence

CVE-2023-6263

Server Spoofing Vulnerability in NxCloud PUBLISHED

Description (CNA)

An issue was discovered by IPVM team in Network Optix NxCloud before 23.1.0.40440. It was possible to add a fake VMS server to NxCloud by using the exact identification of a legitimate VMS server. As result, it was possible to retrieve authorization headers from legitimate users when the legitimate client connects to the fake VMS server.

Affected (CNA)

Vendor / productVersions
Network Optix / NxCloudaffected 0 before 23.1.0.40440

CWE

CWE-290

References

ADP enrichment

CVE

No English description supplied.