Back to Database
Status published
Medium
CVE-2023-45083
HyperCloud: "admin" and "serveradmin" users can be deleted
Vulnerability Description
An Improper Privilege Management vulnerability exists in HyperCloud that will impact the ability for a user to authenticate against the management plane. An authenticated admin-level user may be able to delete the "admin" or "serveradmin" users, which prevents authentication from subsequently succeeding. This issue affects HyperCloud versions 1.0 to any release before 2.1.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-45083
Credits & Attribution
No credits recorded in the NVD database.
References
More from SoftIron
View All →CVE-2025-10650
Improper SSH Key Handling in Internal Debug Builds May Grant Cluster-Level Access to Non-Administrative Users
Low
1.8
CVE-2024-13058
Authenticated, non-admin users can create storage pools via the sifi API
Medium
4.8
CVE-2023-45085
When compute hosts are disabled and reenabled, they immediately transition to "ON", not "INIT"
Low
3.2
CVE-2023-45084
Media caddy removal and reinsertion without reboot may cause data loss
High
7
Affected Vendor
SoftIron
View all reports →Affected Software
HyperCloud
Vulnerable Versions:
1.0
Timeline
Official Publish:
December 5th, 2023
Last Modified:
August 2nd, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H