CVE Catalog
CVE-2023-34345
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.72%
49th percentile - higher than 49% of all known CVEs
Summary
AMI BMC contains a vulnerability in the SPX REST API, allowing an attacker with the required privileges to access arbitrary files, which may lead to information disclosure.
Risk Assessment
This vulnerability could allow attackers to access sensitive data, posing a risk to the organization's security.
Recommendation
It is recommended to restrict access to the SPX REST API and monitor logs for unauthorized access attempts.
Original NVD description (English source)
AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can access arbitrary files, which may lead to information disclosure.