CVE-2023-34345
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
AMI BMC contains a vulnerability in the SPX REST API, allowing an attacker with the required privileges to access arbitrary files, which may lead to information disclosure.
Risk Assessment
This vulnerability could allow attackers to access sensitive data, posing a risk to the organization's security.
Recommendation
It is recommended to restrict access to the SPX REST API and monitor logs for unauthorized access attempts.
Other vulnerabilities in AMI BMC SPX REST API
See all- CVE-2023-34343High
AMI BMC contains a vulnerability in the SPX REST API that allows an attacker with the required privileges to inject arbitrary shell commands. This may lead to code execution, denial of service, information disclosure, or data tampering.
- CVE-2023-34334High
AMI BMC contains a vulnerability in the SPX REST API that allows an attacker with the required privileges to inject arbitrary shell commands. This may lead to code execution, denial of service, information disclosure, or data tampering.
Original NVD description (English source)
AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can access arbitrary files, which may lead to information disclosure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS