Lucene search

K
cvelistHonorCVELIST:CVE-2023-23437
HistoryDec 29, 2023 - 2:15 a.m.

CVE-2023-23437

2023-12-2902:15:09
Honor
www.cve.org
1
honor products
information leak
vulnerability
exploitation
cve-2023-23437

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5.6

Confidence

High

EPSS

0

Percentile

9.0%

Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "com.hihonor.vmall\t",
    "vendor": "Honor",
    "versions": [
      {
        "lessThan": "2.3.3.300",
        "status": "affected",
        "version": "2.3.1.303",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5.6

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2023-23437