Lucene search
HistorySep 27, 2023 - 3:19 p.m.
CVE-2023-4003
identity password manager
privilege escalation
vulnerability
unspecified method
6.8 Medium
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
23.2%
One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an unspecified method. CWE-250: Execution with Unnecessary Privileges.
Affected configurations
Node
oneidentitypassword_managerRange5.9.7.1–5.11.2
ORoneidentitypassword_managerRange5.12.0–5.12.2
Related
cve
cve
CVE-2023-4003
2023-09-27 15:19:39
prion
prion
Default credentials
2023-09-27 15:19:00
cvelist
cvelist
6.8 Medium
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
23.2%
Related for NVD:CVE-2023-4003