Lucene search
HistoryNov 15, 2023 - 12:15 a.m.
CVE-2023-38544
logged in user
modify files
unauthorized changes
compromise integrity
network security
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
0.0004 Low
EPSS
Percentile
9.0%
A logged in user can modify specific files that may lead to unauthorized changes in system-wide configuration settings. This vulnerability could be exploited to compromise the integrity and security of the network on the affected system.
Affected configurations
Node
ivantisecure_access_clientMatch22.2r1
ORivantisecure_access_clientMatch22.3r1
ORivantisecure_access_clientMatch22.3r2
ORivantisecure_access_clientMatch22.3r3
linuxlinux_kernelMatch-
Related
cvelist
cvelist
CVE-2023-38544
2023-11-14 23:18:08
cve
cve
CVE-2023-38544
2023-11-15 00:15:08
prion
prion
Default configuration
2023-11-15 00:15:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
0.0004 Low
EPSS
Percentile
9.0%
Related for NVD:CVE-2023-38544