CVE-2023-28870 - CERT CVE

  1. CVE-2023-28870

ID CVE-2023-28870
Sažetak Insecure File Permissions in Support Assistant in NCP Secure Enterprise Client before 12.22 allow attackers to write to configuration files from low-privileged user accounts.
Reference
CVSS
Base: 6.5
Impact: 3.6
Exploitability:2.8
Pristup
VektorSloženostAutentikacija
NETWORK LOW LOW
Impact
PovjerljivostCjelovitostDostupnost
NONE HIGH NONE
CVSS vektor CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Zadnje važnije ažuriranje 12-12-2023 - 22:35
Objavljeno 09-12-2023 - 07:15