K000134746: BIG-IP Edge Client for macOS vulnerability CVE-2023-38418

Security Advisory Description The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. CVE-2023-38418 Impact An attacker with an ability to run unprivileged arbitrary code on the target macOS client may be able to abuse an...

CVE-2023-38418: Improper Verification of Cryptographic Signature

The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2022-43703

An installer that loads or executes files using an unconstrained search path may be vulnerable to substitute files under control of an attacker being loaded or executed instead of the intended files...

CVE-2022-43702

When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify or replace the installer to execute malicious code...

CVE-2022-43703

An installer that loads or executes files using an unconstrained search path may be vulnerable to substitute files under control of an attacker being loaded or executed instead of the intended files...

Design/Logic Flaw

When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify or replace the installer to execute malicious code...

CVE-2022-43703 Incomplete verification of installation file signature

An installer that loads or executes files using an unconstrained search path may be vulnerable to substitute files under control of an attacker being loaded or executed instead of the intended files...

CVE-2022-43703

The connected Intel advisory (INTEL-SA-00930) associates CVE-2022-43703 with Arm DS for Intel® SoC FPGA software, describing an Uncontrolled search path element in the installer that may allow escalation of privilege via local access. Affected product: Arm DS for Intel® SoC FPGA software, all ver...

CVE-2022-43702

Arm DS for Intel SoC FPGA software is affected by CVE-2022-43702 due to improper access control in the installer, potentially allowing a local-authenticated user to escalate privileges. The advisory notes all versions are affected and assigns a CVSS v3.1 base score of 8.8 (High). Remediation advi...

CVE-2022-43702 Incomplete verification of installation file signature

When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify or replace the installer to execute malicious code...

PT-2023-14295 · Arm · Arm Compiler 5 (Ac5) +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns an installer that loads or executes files using an unconstrained search path, making it potentially vulnerable to attacks where an...

July 27, 2023, update for Office 2016 (KB5002117)

None None...

CVE-2022-43702: Improper Access Control

When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify or replace the installer to execute malicious code...

ARM Compiler security vulnerabilities

ARM Compiler is a tool from ARM UK for compiling and generating applications for the ARM architecture. ARM Compiler suffers from a security vulnerability that originates when a directory containing the installer does not have sufficiently restricted file permissions, allowing an attacker to modif...

July 27, 2023, update for Office 2016 (KB4493158)

None None...

PT-2023-14294 · Arm · Arm Compiler 5 (Ac5) +6

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue arises when the directory containing the installer lacks sufficiently restrictive file permissions, allowing an attacker to modify or replace...

July 27, 2023, update for Office 2016 (KB5002458)

None None...

July 27, 2023, update for Word 2016 (KB5002456)

None None...

July 27, 2023, update for Excel 2016 (KB5002454)

None None...

com.sonymobile.jenkins.plugins.lenientshutdown:lenientshutdown (>=1.1.0, <=1.1.1), org.jenkins-ci.main:jenkins-test-harness (1.601) +3 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.601)

org.jenkins-ci.main:jenkins-core MAVEN version 1.601 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonymobile.jenkins.plugins.lenientshutdown:lenientshutdown =1.1.0, =1.0, =1.3 -...