CVE-2023-0392CWE-428

The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could allow arbitrary code execution

Low · published November 8, 2023

CVSS v3.1
3.9
EPSS
0%
Percentile
10.3
In the wild
Unconfirmed
What it is

The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could allow arbitrary code execution.

The record
Technical detail
CVSS v3.1
3.9 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00208 · 10.3th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2023-11-08T20:37Z
EPSS history
Timeline
  • 08 NOV 20:37Z
    The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could allow arbitrary code execution
    cvelistv5