CVE-2023-41099

2024-03-2200:00:00

mitre

github.com

atos eviden cardos api

windows installer

vulnerability

local privilege escalation

AI Score

6.8

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

In the Windows installer in Atos Eviden CardOS API before 5.5.5.2811, Local Privilege Escalation can occur.(from a regular user to SYSTEM).

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:atos:cardos:*:*:*:*:*:*:*:*"
    ],
    "vendor": "atos",
    "product": "cardos",
    "versions": [
      {
        "status": "affected",
        "version": "5.0",
        "lessThan": "5.5.5.2811",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

support.bull.com/ols/product/security/psirt/security-bulletins/cardos-api-local-privilege-escalation-psirt-358-tlp-clear-version-2-6-cve-2023-41099/view