Lucene search

[email protected]CVE-2023-32764

HistoryAug 03, 2023 - 6:15 p.m.

CVE-2023-32764

2023-08-0318:15:11

[email protected]

web.nvd.nist.gov

cve-2023-32764

fabasoft cloud enterprise client

privilege escalation

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator.

Affected configurations

NVD

Node

microsoftwindowsMatch-

AND

fabasoftcloudMatch-

fabasoftcloud_enterprise_clientMatch23.3.0.130

fabasoftfolio_\/_egov-suiteMatch2021update_rollup_3

fabasoftfolio_\/_egov-suiteMatch2022-

fabasoftfolio_\/_egov-suiteMatch2022update_rollup_3

fabasoftfolio_\/_egov-suiteMatch2023-

fabasoftfolio_\/_egov-suiteMatch2023update_rollup_1

CPENameOperatorVersion
fabasoft:cloudfabasoft cloudeq-
fabasoft:cloud_enterprise_clientfabasoft cloud enterprise clienteq23.3.0.130
fabasoft:folio_\/_egov-suitefabasoft folio / egov-suiteeq2021
fabasoft:folio_\/_egov-suitefabasoft folio / egov-suiteeq2022
fabasoft:folio_\/_egov-suitefabasoft folio / egov-suiteeq2023

CPE	Name	Operator	Version
fabasoft:cloud	fabasoft cloud	eq	-
fabasoft:cloud_enterprise_client	fabasoft cloud enterprise client	eq	23.3.0.130
fabasoft:folio_\/_egov-suite	fabasoft folio / egov-suite	eq	2021
fabasoft:folio_\/_egov-suite	fabasoft folio / egov-suite	eq	2022
fabasoft:folio_\/_egov-suite	fabasoft folio / egov-suite	eq	2023

References

help.supportservices.fabasoft.com/index.php?topic=doc/Vulnerabilities-Fabasoft-Folio/vulnerabilities-2023.htm#client-autoupdate-harmful-code-installation-vulnerability-pdo06614-

www.compass-security.com/fileadmin/Research/Advisories/2023_01_CSNC-2023-002_LPE_Cloud_Client.txt

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVE-2023-32764

cvelist1 nvd1 prion1