CVE-2023-32871CWE-391
In DA, there is a possible permission bypass due to an incorrect status check
Medium · published May 6, 2024
What it is
In DA, there is a possible permission bypass due to an incorrect status check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08355514; Issue ID: ALPS08355514.
The record
Technical detail
- CVSS v3.1
- 5.3 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00083 · 0.2th percentile
- Weakness
- CWE-391 · Unchecked Error Condition
- Published
- 2024-05-06T02:51Z
EPSS history
Timeline