Lucene search

K
nvd[email protected]NVD:CVE-2023-20512
HistoryAug 13, 2024 - 5:15 p.m.

CVE-2023-20512

2024-08-1317:15:18
web.nvd.nist.gov
2
pmfw
hardcoded key
privileged attacker
debug information leakage

CVSS3

1.9

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS

0

Percentile

9.5%

A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in internal debug information leakage.

CVSS3

1.9

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS

0

Percentile

9.5%

Related for NVD:CVE-2023-20512