Lucene search

SymantecCVELIST:CVE-2023-23958

HistorySep 26, 2023 - 9:51 p.m.

CVE-2023-23958 Symantec Protection Engine Hash Leak Vulnerability

2023-09-2621:51:02

CWE-200

symantec

www.cve.org

symantec

protection engine

hash leak

vulnerability

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

6.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.8%

JSON

Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Symantec Protection Engine",
    "vendor": "Symantec",
    "versions": [
      {
        "status": "unaffected",
        "version": "9.1.0"
      }
    ]
  }
]

References

support.broadcom.com/external/content/SecurityAdvisories/0/22599

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

6.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.8%

JSON

Related for CVELIST:CVE-2023-23958