CVE-2023-43320
- Source
- https://cve.org/CVERecord?id=CVE-2023-43320
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-43320.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-43320
- Published
- 2023-09-27T00:00:00Z
- Modified
- 2026-07-15T01:48:50.810780490Z
- Summary
- [none]
- Details
-
An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxmox Mail Gateway v.7.1 thru v.8.0 allows a remote authenticated attacker to escalate privileges via bypassing the two-factor authentication component.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/43xxx/CVE-2023-43320.json", "cna_assigner": "mitre" }- References
-
- http://packetstormsecurity.com/files/176967/Proxmox-VE-7.4-1-TOTP-Brute-Force.html
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/43xxx/CVE-2023-43320.json
- https://nvd.nist.gov/vuln/detail/CVE-2023-43320
- https://bugzilla.proxmox.com/show_bug.cgi?id=4579
- https://bugzilla.proxmox.com/show_bug.cgi?id=4584
- https://github.com/proxmox/proxmox-rs/commit/50b793db8d3421bbfe2bce060a486263f18a90cb