Lucene search

[email protected]CVE-2023-28093

HistoryApr 10, 2023 - 9:15 p.m.

CVE-2023-28093

2023-04-1021:15:07

CWE-295

[email protected]

web.nvd.nist.gov

cve-2023-28093

user

compromised configuration

unsigned binary

service

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

7.5 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.5%

JSON

A user with a compromised configuration can start an unsigned binary as a service.

Affected configurations

NVD

Node

pegasynchronization_engineRange3.1.1–3.1.30

CPENameOperatorVersion
pega:synchronization_enginepega synchronization enginelt3.1.30

CPE	Name	Operator	Version
pega:synchronization_engine	pega synchronization engine	lt	3.1.30

CNA Affected

[
  {
    "vendor": "Pegasystems",
    "product": "RPA: Synchronization Engine",
    "versions": [
      {
        "version": "3.1.1",
        "status": "affected",
        "lessThan": "unspecified",
        "versionType": "custom"
      },
      {
        "version": "unspecified",
        "lessThan": "3.1.28",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

support.pega.com/support-doc/pega-security-advisory-b23-robotics-and-workforce-intelligence-local-privilege

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

7.5 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.5%

JSON

Related for CVE-2023-28093

cvelist1 nvd1 prion1