CVE-2023-2622CWE-668

Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the InspectSetup service endpoint

Low · published November 1, 2023

CVSS v3.1
2.7
EPSS
0%
Percentile
28.3
In the wild
Unconfirmed
What it is

Authenticated clients can read arbitrary files on the MAIN Computer

system using the remote procedure call (RPC) of the InspectSetup

service endpoint. The low privilege client is then allowed to read arbitrary files that they do not have authorization to read.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00357 · 28.3th percentile
Weakness
CWE-668 · Exposure of Resource to Wrong Sphere
Published
2023-11-01T02:24Z
EPSS history
Timeline
  • 01 NOV 02:24Z
    Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the InspectSetup service endpoint
    cvelistv5