CVE-2023-36658

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. It has an unquoted service path that can be abused locally...

CVE-2023-36658

creationtimestamp| type| source ---|---|--- 2023-09-15 12:25:15+00:00| seen| https://t.me/cibsecurity/70589...

CVE-2023-36658

Affected software: OPSWAT MetaDefender KIOSK 4.6.1.9996. Vulnerability type / root cause: unquoted service path that can be abused locally, enabling potential local privilege escalation. Impact (as documented): high confidentiality, integrity, and availability impact; CVSS 3.1 base score 7.8 (LOC...