Lucene search

K
nvd[email protected]NVD:CVE-2023-21697
HistoryFeb 14, 2023 - 8:15 p.m.

CVE-2023-21697

2023-02-1420:15:13
CWE-126
web.nvd.nist.gov
windows
isns server
information disclosure
vulnerability
cve-2023-21697

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.6%

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

Affected configurations

NVD
Node
microsoftwindows_10Range<10.0.10240.19747
OR
microsoftwindows_10_1607Range<10.0.14393.5717
OR
microsoftwindows_10_1809Range<10.0.17763.4010
OR
microsoftwindows_10_20h2Range<10.0.19042.2604
OR
microsoftwindows_10_21h2Range<10.0.19044.2604
OR
microsoftwindows_10_22h2Range<10.0.19045.2604
OR
microsoftwindows_server_2008Match-sp2
OR
microsoftwindows_server_2008Matchr2sp1x64
OR
microsoftwindows_server_2012Match-
OR
microsoftwindows_server_2012Matchr2
OR
microsoftwindows_server_2016Match-
OR
microsoftwindows_server_2019Match-

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.6%