CVE-2023-3699CWE-269

An Improper Privilege Management vulnerability was found on the ADM

High · published August 22, 2023

CVSS v3.1
8.7
EPSS
0%
Percentile
4.4
In the wild
Unconfirmed
What it is

An Improper Privilege Management vulnerability was found in ASUSTOR Data Master (ADM) allows an unprivileged local users to modify the storage devices configuration. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00156 · 4.4th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2023-08-22T08:57Z
EPSS history
Timeline
  • 22 AUG 08:57Z
    An Improper Privilege Management vulnerability was found on the ADM
    cvelistv5