CVE-2023-37537

2023-10-1715:15:10

CWE-428

[email protected]

web.nvd.nist.gov

cve-2023-37537

vulnerability

hcl appscan

windows service

elevated privileges

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

An unquoted service path vulnerability in HCL AppScan Presence, deployed as a Windows service in HCL AppScan on Cloud (ASoC), may allow a local attacker to gain elevated privileges.

Affected configurations

NVD

Node

hcltechappscan_presenceRange≤2.1.37

CPENameOperatorVersion
hcltech:appscan_presencehcltech appscan presencele2.1.37

CPE	Name	Operator	Version
hcltech:appscan_presence	hcltech appscan presence	le	2.1.37

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "HCL AppScan Presence",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "<=2.1.37"
      }
    ]
  }
]