exploitDog

CVE-2023-32458

Опубликовано: 27 сент. 2023

Источник: nvd

CVSS3: 7.3

CVSS3: 7.8

EPSS Низкий

Описание

Dell AppSync, versions 4.4.0.0 to 4.6.0.0 including Service Pack releases, contains an improper access control vulnerability in Embedded Service Enabler component. A local malicious user could potentially exploit this vulnerability during installation leading to a privilege escalation.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:emc:appsync:*:*:*:*:*:*:*:*

Версия от 4.4.0.0 (включая) до 4.6.0.0 (включая)

EPSS

Процентиль: 20%

0.00064

Низкий

7.3 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-284

Связанные уязвимости

GHSA-8fmc-83h9-5qmg

CVSS3: 7.3

github

больше 2 лет назад

Dell AppSync, versions 4.4.0.0 to 4.6.0.0 including Service Pack releases, contains an improper access control vulnerability in Embedded Service Enabler component. A local malicious user could potentially exploit this vulnerability during installation leading to a privilege escalation.

EPSS

Процентиль: 20%

0.00064

Низкий

7.3 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-284