CVE-2023-29066

2023-11-2821:15:08

CWE-269

CWE-266

[email protected]

web.nvd.nist.gov

cve-2023-29066

os account

data access

local folders

CVSS3

3.5

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

EPSS

Percentile

12.7%

JSON

The FACSChorus software does not properly assign data access privileges for operating system user accounts. A non-administrative OS account can modify information stored in the local application data folders.

Affected configurations

Nvd

Node

bdfacschorusMatch5.0

bdfacschorusMatch5.1

AND

hphp_z2_tower_g9Match-

Node

bdfacschorusMatch3.0

bdfacschorusMatch3.1

AND

hphp_z2_tower_g5Match-

VendorProductVersionCPE
bdfacschorus5.0cpe:2.3:a:bd:facschorus:5.0:*:*:*:*:*:*:*
bdfacschorus5.1cpe:2.3:a:bd:facschorus:5.1:*:*:*:*:*:*:*
hphp_z2_tower_g9-cpe:2.3:h:hp:hp_z2_tower_g9:-:*:*:*:*:*:*:*
bdfacschorus3.0cpe:2.3:a:bd:facschorus:3.0:*:*:*:*:*:*:*
bdfacschorus3.1cpe:2.3:a:bd:facschorus:3.1:*:*:*:*:*:*:*
hphp_z2_tower_g5-cpe:2.3:h:hp:hp_z2_tower_g5:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
bd	facschorus	5.0	cpe:2.3:a:bd:facschorus:5.0:::::::*
bd	facschorus	5.1	cpe:2.3:a:bd:facschorus:5.1:::::::*
hp	hp_z2_tower_g9	-	cpe:2.3:h:hp:hp_z2_tower_g9:-:::::::*
bd	facschorus	3.0	cpe:2.3:a:bd:facschorus:3.0:::::::*
bd	facschorus	3.1	cpe:2.3:a:bd:facschorus:3.1:::::::*
hp	hp_z2_tower_g5	-	cpe:2.3:h:hp:hp_z2_tower_g5:-:::::::*