Lucene search
HistoryMay 17, 2023 - 1:15 p.m.
CVE-2023-2679
snow software spe
data leakage
adobe connector
windows
privileged user
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
4.4
Confidence
High
EPSS
0.001
Percentile
17.6%
Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data.
Affected configurations
Node
snowsoftwaresnow_license_managerRange9.27–9.30service_provider
microsoftwindowsMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| snowsoftware | snow_license_manager | * | cpe:2.3:a:snowsoftware:snow_license_manager:*:*:*:*:service_provider:*:*:* |
| microsoft | windows | - | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-2679 Data leakage in Adobe connector for SPE edition of SLM
2023-05-17 12:55:58
cve
cve
CVE-2023-2679
2023-05-17 13:15:09
prion
prion
Code injection
2023-05-17 13:15:00
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
4.4
Confidence
High
EPSS
0.001
Percentile
17.6%
Related for NVD:CVE-2023-2679