5.5
CVE-2023-38544
- EPSS 0.17%
- Veröffentlicht 15.11.2023 00:15:08
- Zuletzt bearbeitet 21.11.2024 08:13:47
- Quelle support@hackerone.com
- Teams Watchlist Login
- Unerledigt Login
A logged in user can modify specific files that may lead to unauthorized changes in system-wide configuration settings. This vulnerability could be exploited to compromise the integrity and security of the network on the affected system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ivanti ≫ Secure Access Client Version22.2 Updater1
Ivanti ≫ Secure Access Client Version22.3 Updater1
Ivanti ≫ Secure Access Client Version22.3 Updater2
Ivanti ≫ Secure Access Client Version22.3 Updater3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Typ | Quelle | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 0.17% | 0.395 |
Quelle | Base Score | Exploit Score | Impact Score | Vector String |
---|---|---|---|---|
nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
|
support@hackerone.com | 5.3 | 1.8 | 3.4 |
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
|