Lucene search
HistoryOct 17, 2023 - 3:15 p.m.
CVE-2023-37537
hcl appscan
unquoted service path
windows service
local attacker
elevated privileges
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
An unquoted service path vulnerability in HCL AppScan Presence, deployed as a Windows service in HCL AppScan on Cloud (ASoC), may allow a local attacker to gain elevated privileges.
Affected configurations
Node
hcltechappscan_presenceRange≤2.1.37
Related
cnvd
cnvd
HCL Technologies AppScan Presence Elevation of Privilege Vulnerability
2023-10-23 00:00:00
cve
cve
CVE-2023-37537
2023-10-17 15:15:10
prion
prion
Design/Logic Flaw
2023-10-17 15:15:00
cvelist
cvelist
openvas
openvas
Microsoft Windows Unquoted Path Vulnerability (SMB Login)
2018-03-23 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2023-37537