8.8
CVE-2023-4665
- EPSS 0.57%
- Published 15.09.2023 09:15:08
- Last modified 24.09.2025 19:37:49
- Source iletisim@usom.gov.tr
- Teams watchlist Login
- Open Login
Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation.This issue affects Saphira Connect: before 9.
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Type | Source | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 0.57% | 0.675 |
Source | Base Score | Exploit Score | Impact Score | Vector string |
---|---|---|---|---|
iletisim@usom.gov.tr | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-279 Incorrect Execution-Assigned Permissions
While it is executing, the product sets the permissions of an object in a way that violates the intended permissions that have been specified by the user.
CWE-732 Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.