Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2023-23908
HistoryAug 11, 2023 - 3:15 a.m.

CVE-2023-23908

2023-08-1103:15:18
Alpine Linux Development Team
security.alpinelinux.org
9
cve-2023-23908
information disclosure
local access
unix

6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Improper access control in some 3rd Generation Intelยฎ Xeonยฎ Scalable processors may allow a privileged user to potentially enable information disclosure via local access.

6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%