Lucene search

K
cvelistFluid AttacksCVELIST:CVE-2023-3891
HistorySep 15, 2023 - 2:07 a.m.

CVE-2023-3891 Lapce v0.2.8 - Privilege escalation via Race Condition

2023-09-1502:07:22
CWE-367
Fluid Attacks
www.cve.org
3
cve-2023-3891
lapce v0.2.8
privilege escalation
race condition
system security

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

21.5%

Race condition in Lapce v0.2.8 allows an attacker to elevate privileges on the system

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows",
      "MacOS",
      "Linux"
    ],
    "product": "Lapce",
    "vendor": "Lapce",
    "versions": [
      {
        "status": "affected",
        "version": "0.2.8"
      }
    ]
  }
]

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

21.5%

Related for CVELIST:CVE-2023-3891