PT-2023-27224 · One Identity · One Identity Password Manager

Roi Hay · Publicado 2023-09-27 · Atualizado 2023-09-29 · CVE-2023-4003

Positive Technologies (AI Summary)

CVSS v3.1

7.6

Alta

Vetor base

AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions One Identity Password Manager version 5.9.7.1

Description An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an unspecified method. This issue is related to execution with unnecessary privileges.

Recommendations For One Identity Password Manager version 5.9.7.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-250

Identificadores relacionados

CVE-2023-4003

Produtos afetados

One Identity Password Manager

Referências · 4

• https://gov.il/en/Departments/faq/cve_advisories · Nota
• https://osv.dev/vulnerability/CVE-2023-4003 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-4003 · Nota de Segurança
• https://twitter.com/CVEnew/status/1707009488262193267 · Publicação no Twitter