Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 01/02/2023 Updated: 11/04/2024

CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2

VMScore: 0

Connectwise Automate 2022.11 is vulnerable to Cleartext authentication. Authentication is being done via HTTP (cleartext) with SSL disabled. OTE: the vendor's position is that, by design, this is controlled by a configuration option in which a customer can choose to use HTTP (rather than HTTPS) during troubleshooting.

Vulnerable Product	Search on Vulmon	Subscribe to Product
connectwise automate 2022.11

CVE-2023-23130

CVE-2023-23130 CVE-2023-23130 Connectwise Automate v202211 is vulnerable to Cleartext authentication Authentication is being done via HTTP (cleartext) with SSL disabled

CWE-319 https://github.com/l00neyhacker/CVE-2023-23130 https://nvd.nist.gov https://github.com/l00neyhacker/CVE-2023-23130

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-23130

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect