Lucene search

[email protected]CVE-2023-5097

HistoryJan 16, 2024 - 8:15 p.m.

CVE-2023-5097

2024-01-1620:15:45

CWE-20

[email protected]

web.nvd.nist.gov

cve-2023-5097

improper input validation

hypr

workforce access

windows

path traversal

nvd

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.4 High

AI Score

Confidence

Low

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

8.7%

JSON

Improper Input Validation vulnerability in HYPR Workforce Access on Windows allows Path Traversal.This issue affects Workforce Access: before 8.7.

CPENameOperatorVersion
hypr:workforce_accesshypr workforce accesslt8.7
hypr:workforce_accesshypr workforce accesseq6.17.0
hypr:workforce_accesshypr workforce accesseq7.0.2
hypr:workforce_accesshypr workforce accesseq7.1.0
hypr:workforce_accesshypr workforce accesseq6.15.0
hypr:workforce_accesshypr workforce accesseq7.2.1
hypr:workforce_accesshypr workforce accesseq7.1.2
hypr:workforce_accesshypr workforce accesseq7.7.1
hypr:workforce_accesshypr workforce accesseq7.3.0
hypr:workforce_accesshypr workforce accesseq6.17.1

CPE	Name	Operator	Version
hypr:workforce_access	hypr workforce access	lt	8.7
hypr:workforce_access	hypr workforce access	eq	6.17.0
hypr:workforce_access	hypr workforce access	eq	7.0.2
hypr:workforce_access	hypr workforce access	eq	7.1.0
hypr:workforce_access	hypr workforce access	eq	6.15.0
hypr:workforce_access	hypr workforce access	eq	7.2.1
hypr:workforce_access	hypr workforce access	eq	7.1.2
hypr:workforce_access	hypr workforce access	eq	7.7.1
hypr:workforce_access	hypr workforce access	eq	7.3.0
hypr:workforce_access	hypr workforce access	eq	6.17.1

Rows per page:

1-10 of 251

References

www.hypr.com/security-advisories

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.4 High

AI Score

Confidence

Low

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

8.7%

JSON

Related for CVE-2023-5097

prion1 cvelist1