Lucene search

HYPRCVELIST:CVE-2023-6335

HistoryJan 16, 2024 - 7:42 p.m.

CVE-2023-6335

2024-01-1619:42:02

CWE-59

HYPR

www.cve.org

vulnerability

hypr

workforce access

windows

link following

CVSS3

6.4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L

EPSS

Percentile

9.0%

JSON

Improper Link Resolution Before File Access (‘Link Following’) vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "Workforce Access",
    "vendor": "HYPR",
    "versions": [
      {
        "lessThan": "8.7",
        "status": "affected",
        "version": "0",
        "versionType": "patch"
      }
    ]
  }
]

References

www.hypr.com/security-advisories

CVSS3

6.4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L

EPSS

Percentile

9.0%

JSON

Related for CVELIST:CVE-2023-6335