Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:43472
HistoryOct 02, 2023 - 7:39 p.m.

Privilege Escalation

2023-10-0219:39:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
xen
vulnerability
shadow mode
software
privilege escalation

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

9.0%

xen is vulnerable to Privilege Escalation. This vulnerability exists due to a flaw in the shadow mode implementation which can be used to bypass the policy mechanisms allowing an attacker to exploit this vulnerability to gain elevated privileges.

Affected configurations

Vulners
Node
veracodexen\Match3.154.15.3-r2
OR
veracodexen\Match3.154.15.1-r0
OR
veracodexen\Match3.154.15.2-r1
OR
veracodexen\Match3.154.15.3-r0
OR
veracodexen\Match3.154.15.4-r0
OR
veracodexen\Match3.154.15.4-r3
OR
veracodexen\Match3.154.15.2-r2
OR
veracodexen\Match3.154.15.4-r1
OR
veracodexen\Match3.154.15.1-r2
OR
veracodexen\Match3.154.15.3-r3
OR
veracodexen\Match3.154.15.5-r0
OR
veracodexen\Match3.154.15.3-r1
OR
veracodexen\Match3.154.15.2-r0
OR
veracodexen\Match3.174.16.2-r1
OR
veracodexen\Match3.174.16.2-r0
OR
veracodexen\Match3.174.16.4-r0
OR
veracodexen\Match3.174.16.3-r0
OR
veracodexen\Match3.174.16.4-r3
OR
veracodexen\Match3.174.16.2-r2
OR
veracodexen\Match3.174.16.4-r1
OR
veracodexen\Match3.174.16.5-r0
OR
veracodexen\Matchedge4.13.0-r4
OR
veracodexen\Matchedge4.16.2-r3
OR
veracodexen\Matchedge4.13.0-r3
OR
veracodexen\Matchedge4.16.0-r1
OR
veracodexen\Matchedge4.16.1-r5
OR
veracodexen\Matchedge4.16.1-r6
OR
veracodexen\Matchedge4.13.0-r2
OR
veracodexen\Matchedge4.17.1-r5
OR
veracodexen\Matchedge4.17.1-r0
OR
veracodexen\Matchedge4.16.2-r2
OR
veracodexen\Matchedge4.17.0-r5
OR
veracodexen\Matchedge4.17.0-r1
OR
veracodexen\Matchedge4.16.2-r0
OR
veracodexen\Matchedge4.15.1-r2
OR
veracodexen\Matchedge4.17.1-r1
OR
veracodexen\Matchedge4.16.1-r2
OR
veracodexen\Matchedge4.17.1-r3
OR
veracodexen\Matchedge4.16.2-r1
OR
veracodexen\Matchedge4.17.0-r3
OR
veracodexen\Matchedge4.15.0-r1
OR
veracodexen\Matchedge4.17.1-r2
OR
veracodexen\Matchedge4.16.1-r3
OR
veracodexen\Matchedge4.16.0-r0
OR
veracodexen\Matchedge4.16.1-r0
OR
veracodexen\Matchedge4.17.2-r0
OR
veracodexen\Matchedge4.15.1-r0
OR
veracodexen\Matchedge4.14.1-r5
OR
veracodexen\Matchedge4.14.1-r3
OR
veracodexen\Matchedge4.15.0-r0
OR
veracodexen\Matchedge4.14.1-r4
OR
veracodexen\Matchedge4.17.0-r2
OR
veracodexen\Matchedge4.16.1-r7
OR
veracodexen\Matchedge4.17.0-r4
OR
veracodexen\Matchedge4.16.1-r4
OR
veracodexen\Match3.164.16.4-r1
OR
veracodexen\Match3.164.16.1-r2
OR
veracodexen\Match3.164.16.4-r0
OR
veracodexen\Match3.164.16.1-r1
OR
veracodexen\Match3.164.16.4-r3
OR
veracodexen\Match3.164.16.1-r5
OR
veracodexen\Match3.164.16.1-r4
OR
veracodexen\Match3.164.16.3-r0
OR
veracodexen\Match3.164.16.1-r3
OR
veracodexen\Match3.164.16.5-r0
OR
veracodexen\Match3.164.16.1-r6
OR
veracodexen\Match3.164.16.1-r0
OR
veracodexen\Match3.164.16.2-r0
OR
veracodexen\Match3.184.17.0-r5
OR
veracodexen\Match3.184.17.1-r1
OR
veracodexen\Match3.184.17.2-r0
OR
veracodexen\Match3.184.17.0-r4
OR
veracodexen\Match3.184.17.1-r0
OR
veracodexen\Match3.184.17.1-r3
OR
veracodexen\Match3.184.17.1-r4
OR
veracodexen\Match3.184.17.1-r2
OR
veracodexen\Match3.154.15.3-r2
OR
veracodexen\Match3.154.15.1-r0
OR
veracodexen\Match3.154.15.2-r1
OR
veracodexen\Match3.154.15.3-r0
OR
veracodexen\Match3.154.15.4-r0
OR
veracodexen\Match3.154.15.4-r3
OR
veracodexen\Match3.154.15.2-r2
OR
veracodexen\Match3.154.15.4-r1
OR
veracodexen\Match3.154.15.1-r2
OR
veracodexen\Match3.154.15.3-r3
OR
veracodexen\Match3.154.15.5-r0
OR
veracodexen\Match3.154.15.3-r1
OR
veracodexen\Match3.154.15.2-r0
OR
veracodexen\Match3.174.16.2-r1
OR
veracodexen\Match3.174.16.2-r0
OR
veracodexen\Match3.174.16.4-r0
OR
veracodexen\Match3.174.16.3-r0
OR
veracodexen\Match3.174.16.4-r3
OR
veracodexen\Match3.174.16.2-r2
OR
veracodexen\Match3.174.16.4-r1
OR
veracodexen\Match3.174.16.5-r0
OR
veracodexen\Matchedge4.13.0-r4
OR
veracodexen\Matchedge4.16.2-r3
OR
veracodexen\Matchedge4.13.0-r3
OR
veracodexen\Matchedge4.16.0-r1
OR
veracodexen\Matchedge4.16.1-r5
OR
veracodexen\Matchedge4.16.1-r6
OR
veracodexen\Matchedge4.13.0-r2
OR
veracodexen\Matchedge4.17.1-r5
OR
veracodexen\Matchedge4.17.1-r0
OR
veracodexen\Matchedge4.16.2-r2
OR
veracodexen\Matchedge4.17.0-r5
OR
veracodexen\Matchedge4.17.0-r1
OR
veracodexen\Matchedge4.16.2-r0
OR
veracodexen\Matchedge4.15.1-r2
OR
veracodexen\Matchedge4.17.1-r1
OR
veracodexen\Matchedge4.16.1-r2
OR
veracodexen\Matchedge4.17.1-r3
OR
veracodexen\Matchedge4.16.2-r1
OR
veracodexen\Matchedge4.17.0-r3
OR
veracodexen\Matchedge4.15.0-r1
OR
veracodexen\Matchedge4.17.1-r2
OR
veracodexen\Matchedge4.16.1-r3
OR
veracodexen\Matchedge4.16.0-r0
OR
veracodexen\Matchedge4.16.1-r0
OR
veracodexen\Matchedge4.17.2-r0
OR
veracodexen\Matchedge4.15.1-r0
OR
veracodexen\Matchedge4.14.1-r5
OR
veracodexen\Matchedge4.14.1-r3
OR
veracodexen\Matchedge4.15.0-r0
OR
veracodexen\Matchedge4.14.1-r4
OR
veracodexen\Matchedge4.17.0-r2
OR
veracodexen\Matchedge4.16.1-r7
OR
veracodexen\Matchedge4.17.0-r4
OR
veracodexen\Matchedge4.16.1-r4
OR
veracodexen\Match3.164.16.4-r1
OR
veracodexen\Match3.164.16.1-r2
OR
veracodexen\Match3.164.16.4-r0
OR
veracodexen\Match3.164.16.1-r1
OR
veracodexen\Match3.164.16.4-r3
OR
veracodexen\Match3.164.16.1-r5
OR
veracodexen\Match3.164.16.1-r4
OR
veracodexen\Match3.164.16.3-r0
OR
veracodexen\Match3.164.16.1-r3
OR
veracodexen\Match3.164.16.5-r0
OR
veracodexen\Match3.164.16.1-r6
OR
veracodexen\Match3.164.16.1-r0
OR
veracodexen\Match3.164.16.2-r0
OR
veracodexen\Match3.184.17.0-r5
OR
veracodexen\Match3.184.17.1-r1
OR
veracodexen\Match3.184.17.2-r0
OR
veracodexen\Match3.184.17.0-r4
OR
veracodexen\Match3.184.17.1-r0
OR
veracodexen\Match3.184.17.1-r3
OR
veracodexen\Match3.184.17.1-r4
OR
veracodexen\Match3.184.17.1-r2
VendorProductVersionCPE
veracodexen\3.15cpe:2.3:a:veracode:xen\:3.15:4.15.3-r2:*:*:*:*:*:*:*
veracodexen\3.15cpe:2.3:a:veracode:xen\:3.15:4.15.1-r0:*:*:*:*:*:*:*
veracodexen\3.15cpe:2.3:a:veracode:xen\:3.15:4.15.2-r1:*:*:*:*:*:*:*
veracodexen\3.15cpe:2.3:a:veracode:xen\:3.15:4.15.3-r0:*:*:*:*:*:*:*
veracodexen\3.15cpe:2.3:a:veracode:xen\:3.15:4.15.4-r0:*:*:*:*:*:*:*
veracodexen\3.15cpe:2.3:a:veracode:xen\:3.15:4.15.4-r3:*:*:*:*:*:*:*
veracodexen\3.15cpe:2.3:a:veracode:xen\:3.15:4.15.2-r2:*:*:*:*:*:*:*
veracodexen\3.15cpe:2.3:a:veracode:xen\:3.15:4.15.4-r1:*:*:*:*:*:*:*
veracodexen\3.15cpe:2.3:a:veracode:xen\:3.15:4.15.1-r2:*:*:*:*:*:*:*
veracodexen\3.15cpe:2.3:a:veracode:xen\:3.15:4.15.3-r3:*:*:*:*:*:*:*
Rows per page:
1-10 of 761

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

9.0%