Lucene search
HistoryMay 15, 2024 - 4:15 p.m.
CVE-2023-5937
windows systems
arc configuration files
world-readable
vulnerability
disclosure
local attackers
sensitive data
exfiltration
3.8 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
3.9 Low
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%
On Windows systems, the Arc configuration files resulted to be world-readable.
This can lead to information disclosure by local attackers, via exfiltration of sensitive data from configuration files.
3.8 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
3.9 Low
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%
Related for NVD:CVE-2023-5937