Lucene search
INCDCVELIST:CVE-2023-42486HistorySep 27, 2023 - 12:13 p.m.
CVE-2023-42486 Fortect - CWE-428: Unquoted Search Path or Element
2023-09-2712:13:37
CWE-428
INCD
www.cve.org
2
cve-2023-42486 fortect cwe-428 unquoted search path elevate privileges
CVSS3
6.3
Attack Vector
PHYSICAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.7
Confidence
High
EPSS
0
Percentile
5.1%
Fortect - CWE-428: Unquoted Search Path or Element, may be used by local user to elevate privileges.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Fortect ",
"vendor": "Fortect",
"versions": [
{
"lessThanOrEqual": "Upgrade to version 6.0.0.1",
"status": "affected",
"version": "version 5.0.0.7",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2023-42486
2023-09-27 15:19:32
nvd
nvd
CVE-2023-42486
2023-09-27 15:19:32
prion
prion
Code injection
2023-09-27 15:19:00
vulnrichment
vulnrichment
CVE-2023-42486 Fortect - CWE-428: Unquoted Search Path or Element
2023-09-27 12:13:37
CVSS3
6.3
Attack Vector
PHYSICAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.7
Confidence
High
EPSS
0
Percentile
5.1%
Related for CVELIST:CVE-2023-42486