Lucene search

K
nvd[email protected]NVD:CVE-2023-0834
HistoryApr 28, 2023 - 3:15 p.m.

CVE-2023-0834

2023-04-2815:15:10
CWE-732
web.nvd.nist.gov
2
cve-2023-0834
permission assignment
critical resource
vulnerability
hypr workforce access
macos
privilege escalation

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.002

Percentile

54.1%

Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on MacOS allows Privilege Escalation.This issue affects Workforce Access: from 6.12 before 8.1.

Affected configurations

Nvd
Node
hyprworkforce_accessRange6.12.08.1.0
AND
applemacosMatch-
VendorProductVersionCPE
hyprworkforce_access*cpe:2.3:a:hypr:workforce_access:*:*:*:*:*:*:*:*
applemacos-cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.002

Percentile

54.1%

Related for NVD:CVE-2023-0834