Lucene search

[email protected]CVE-2023-41726

HistoryNov 03, 2023 - 8:15 p.m.

CVE-2023-41726

2023-11-0320:15:09

CWE-276

[email protected]

web.nvd.nist.gov

ivanti

avalanche

incorrect default permissions

local privilege escalation

vulnerability

cve-2023-41726

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

48.1%

JSON

Ivanti Avalanche Incorrect Default Permissions allows Local Privilege Escalation Vulnerability

CPENameOperatorVersion
ivanti:avalancheivanti avalanchelt6.4.1.236
ivanti:avalancheivanti avalancheeq6.1.106.337
ivanti:avalancheivanti avalancheeq6.3.1.1507
ivanti:avalancheivanti avalancheeq6.1.106.496
ivanti:avalancheivanti avalancheeq6.3.2
ivanti:avalancheivanti avalancheeq6.3.3
ivanti:avalancheivanti avalancheeq6.4.1
ivanti:avalancheivanti avalancheeq6.4.1.207
ivanti:avalancheivanti avalancheeq6.3.4.153
ivanti:avalancheivanti avalancheeq6.3.4

CPE	Name	Operator	Version
ivanti:avalanche	ivanti avalanche	lt	6.4.1.236
ivanti:avalanche	ivanti avalanche	eq	6.1.106.337
ivanti:avalanche	ivanti avalanche	eq	6.3.1.1507
ivanti:avalanche	ivanti avalanche	eq	6.1.106.496
ivanti:avalanche	ivanti avalanche	eq	6.3.2
ivanti:avalanche	ivanti avalanche	eq	6.3.3
ivanti:avalanche	ivanti avalanche	eq	6.4.1
ivanti:avalanche	ivanti avalanche	eq	6.4.1.207
ivanti:avalanche	ivanti avalanche	eq	6.3.4.153
ivanti:avalanche	ivanti avalanche	eq	6.3.4

Rows per page:

1-10 of 201

References

download.wavelink.com/Files/avalanche_v6.4.1.236_release_notes.txt

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

48.1%

JSON

Related for CVE-2023-41726

zdi1 cvelist1 prion1