Lucene search

IntelCVELIST:CVE-2023-39221

HistoryNov 14, 2023 - 7:04 p.m.

CVE-2023-39221

2023-11-1419:04:30

CWE-284

intel

www.cve.org

cve-2023-39221

intel unison

access control

privilege escalation

network access

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

19.3%

JSON

Improper access control for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel Unison software",
    "versions": [
      {
        "version": "See references",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.html