CVE-2023-48700
2 advisories.
PyPI/nautobot-device-onboarding CVE-2023-48700: medium 5.7, EPSS 0.41%
Clear Text Credentials Exposed via Onboarding Task
Action: Upgrade nautobot-device-onboarding to 3.0.0 or later.
pip install nautobot-device-onboarding==3.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 3.0.0 | - |
Fixed versions
| 3.0.0 |
Sources
- osv: GHSA-qf3c-rw9f-jh7v
- https://github.com/nautobot/nautobot-plugin-device-onboarding/security/advisories/GHSA-qf3c-rw9f-jh7v
- https://nvd.nist.gov/vuln/detail/CVE-2023-48700
- https://github.com/nautobot/nautobot-plugin-device-onboarding
- https://github.com/pypa/advisory-database/tree/main/vulns/nautobot-device-onboarding/PYSEC-2023-288.yaml
CVE-2023-48700 · published · modified · JSON
PyPI/nautobot-device-onboarding CVE-2023-48700: medium 6.5, EPSS 0.41%
The Nautobot Device Onboarding plugin uses the netmiko and NAPALM libraries to simplify the onboarding process of a new device into Nautobot down to, in many cases, an IP Address and a Location. Start
Action: Upgrade nautobot-device-onboarding to 3.0.0 or later.
pip install nautobot-device-onboarding==3.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 3.0.0 | - |
Fixed versions
| 3.0.0 |
Sources
- osv: PYSEC-2023-288
- https://github.com/nautobot/nautobot-plugin-device-onboarding/security/advisories/GHSA-qf3c-rw9f-jh7v
CVE-2023-48700 · published · modified · JSON