CVE-2023-29122CWE-708

Incorrect file ownership of privileged service's libraries in Enel X JuiceBox

Medium · published November 5, 2024

CVSS v3.1
6.7
EPSS
0%
Percentile
5.5
In the wild
Unconfirmed
What it is

Under certain conditions, access to service libraries is granted to account they should not have access to.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00166 · 5.5th percentile
Weakness
CWE-708 · Incorrect Ownership Assignment
Published
2024-11-05T15:24Z
EPSS history
Timeline
  • 05 NOV 15:24Z
    Incorrect file ownership of privileged service's libraries in Enel X JuiceBox
    cvelistv5