CVE-2023-25757

2023-08-1103:15:18

Alpine Linux Development Team

security.alpinelinux.org

cve-2023-25757

improper access control

intel unison software

privileged user

network access

escalation of privilege

unix

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N

EPSS

0.001

Percentile

32.7%

JSON

Improper access control in some Intel® Unison™ software before version 10.12 may allow a privileged user to potentially enable escalation of privilege via network access.

OSVersionArchitecturePackageVersionFilename
Alpine3.18-communitynoarchunison= 2.53.3-r0UNKNOWN
Alpine3.19-communitynoarchunison= 2.53.3-r0UNKNOWN
Alpineedge-communitynoarchunison= 2.53.5-r0UNKNOWN
Alpine3.20-communitynoarchunison= 2.53.5-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	3.18-community	noarch	unison	= 2.53.3-r0	UNKNOWN
Alpine	3.19-community	noarch	unison	= 2.53.3-r0	UNKNOWN
Alpine	edge-community	noarch	unison	= 2.53.5-r0	UNKNOWN
Alpine	3.20-community	noarch	unison	= 2.53.5-r0	UNKNOWN