Lucene search

K
nvd[email protected]NVD:CVE-2023-28487
HistoryMar 16, 2023 - 1:15 a.m.

CVE-2023-28487

2023-03-1601:15:47
CWE-116
web.nvd.nist.gov
sudo vulnerability
control character escape
sudoreplay output.

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.5%

Sudo before 1.9.13 does not escape control characters in sudoreplay output.

Affected configurations

NVD
Node
sudo_projectsudoRange<1.9.13
Node
netappactive_iq_unified_managerMatch-vmware_vsphere

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.5%