CVE-2023-4665

EPSS 0.57%
Veröffentlicht 15.09.2023 09:15:08
Zuletzt bearbeitet 24.09.2025 19:37:49
Quelle iletisim@usom.gov.tr
CVE-Watchlists
Login
Unerledigt
Login

Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation.This issue affects Saphira Connect: before 9.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 2 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Adobe ≫ Connect Version < 9.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.57%	0.676

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
iletisim@usom.gov.tr	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-279 Incorrect Execution-Assigned Permissions

While it is executing, the product sets the permissions of an object in a way that violates the intended permissions that have been specified by the user.

CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

https://www.usom.gov.tr/bildirim/tr-23-0535

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-4665

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-4665

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-4665

EUVD