Lucene search
HistoryJan 16, 2024 - 8:15 p.m.
CVE-2023-6335
link resolution
file access
workforce access
windows
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
High
EPSS
0
Percentile
9.0%
Improper Link Resolution Before File Access (‘Link Following’) vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.
Affected configurations
Node
hyprworkforce_accessRange<8.7
microsoftwindowsMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hypr | workforce_access | * | cpe:2.3:a:hypr:workforce_access:*:*:*:*:*:*:*:* |
| microsoft | windows | - | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
References
Related
cvelist
cvelist
CVE-2023-6335
2024-01-16 19:42:02
cve
cve
CVE-2023-6335
2024-01-16 20:15:45
prion
prion
Input validation
2024-01-16 20:15:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
High
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2023-6335