deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-24946
Published: 2023-05-09
Description: Windows Backup Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24946; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24946
CVE: CVE-2023-24947
Published: 2023-05-09
Description: Windows Bluetooth Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24947; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24947
CVE: CVE-2023-24948
Published: 2023-05-09
Description: Windows Bluetooth Driver Elevation of Privilege Vulnerability
CVSS Score: 7.4 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24948; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24948
CVE: CVE-2023-24949
Published: 2023-05-09
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24949; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24949
CVE: CVE-2023-24950
Published: 2023-05-09
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24950; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24950
CVE: CVE-2023-24953
Published: 2023-05-09
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24953; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24953
CVE: CVE-2023-24954
Published: 2023-05-09
Description: Microsoft SharePoint Server Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24954; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24954
CVE: CVE-2023-24955
Published: 2023-05-09
Description: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
CWE: CWE-94, CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24955; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24955; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-24955
CVE: CVE-2023-28251
Published: 2023-05-09
Description: Windows Driver Revocation List Security Feature Bypass Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28251; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28251
CVE: CVE-2023-28283
Published: 2023-05-09
Description: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28283; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28283
CVE: CVE-2023-28290
Published: 2023-05-09
Description: Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability
CVSS Score: 5.3 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28290; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28290
CVE: CVE-2023-29324
Published: 2023-05-09
Description: Windows MSHTML Platform Security Feature Bypass Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-73
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29324; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29324
CVE: CVE-2023-29325
Published: 2023-05-09
Description: Windows OLE Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29325; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29325
CVE: CVE-2023-29333
Published: 2023-05-09
Description: Microsoft Access Denial of Service Vulnerability
CVSS Score: 3.3 (LOW)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29333; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29333
CVE: CVE-2023-29335
Published: 2023-05-09
Description: Microsoft Word Security Feature Bypass Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29335; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29335
CVE: CVE-2023-29336
Published: 2023-05-09
Description: Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29336; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29336; https://www.exploit-db.com/exploits/52301
CVE: CVE-2023-29338
Published: 2023-05-09
Description: Visual Studio Code Spoofing Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-285
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29338; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29338
CVE: CVE-2023-29340
Published: 2023-05-09
Description: AV1 Video Extension Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29340; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29340
CVE: CVE-2023-29341
Published: 2023-05-09
Description: AV1 Video Extension Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29341; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29341
CVE: CVE-2023-29343
Published: 2023-05-09
Description: SysInternals Sysmon for Windows Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29343; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29343
CVE: CVE-2023-2609
Published: 2023-05-09
Description: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/vim/vim/commit/d1ae8366aff286d41e7f5bc513cc0a1af5130aad; https://huntr.dev/bounties/1679be5a-565f-4a44-a430-836412a0b622; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PCLJN4QINITA3ZASKLEJ64C5TFNKELMO/
CVE: CVE-2023-31472
Published: 2023-05-09
Description: An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on the filesystem. This is caused by a command injection vulnerability with a filter applied.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770, CWE-770
References: https://github.com/gl-inet/CVE-issues/blob/main/3.215/Arbitrary_File_Creation.md; https://www.gl-inet.com; https://github.com/gl-inet/CVE-issues/blob/main/3.215/Arbitrary_File_Creation.md
CVE: CVE-2023-31474
Published: 2023-05-09
Description: An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to inject arbitrary parameters in a request to cause opkg to obtain a list of files in a specific directory, by using the regex feature in a package name.
CVSS Score: 7.5 (HIGH)
References: https://github.com/gl-inet/CVE-issues/blob/main/3.215/Directory_Listing.md; https://www.gl-inet.com; https://github.com/gl-inet/CVE-issues/blob/main/3.215/Directory_Listing.md
CVE: CVE-2021-26354
Published: 2023-05-09
Description: Insufficient bounds checking in ASP may allow an
attacker to issue a system call from a compromised ABL which may cause
arbitrary memory values to be initialized to zero, potentially leading to a
loss of integrity.





CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE: CVE-2021-26356
Published: 2023-05-09
Description: A TOCTOU in ASP bootloader may allow an attacker
to tamper with the SPI ROM following data read to memory potentially resulting
in S3 data corruption and information disclosure.









CVSS Score: 7.4 (HIGH)
CWE: CWE-367, CWE-367
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE: CVE-2021-26365
Published: 2023-05-09
Description: Certain size values in firmware binary headers
could trigger out of bounds reads during signature validation, leading to
denial of service or potentially limited leakage of information about
out-of-bounds memory contents.












CVSS Score: 8.2 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE: CVE-2021-26371
Published: 2023-05-09
Description: A compromised or malicious ABL or UApp could
send a SHA256 system call to the bootloader, which may result in exposure of
ASP memory to userspace, potentially leading to information disclosure.









CVSS Score: 5.5 (MEDIUM)
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE: CVE-2021-26379
Published: 2023-05-09
Description: Insufficient input validation of mailbox data in the
SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially
leading to a loss of integrity and privilege escalation.




CVSS Score: 9.8 (CRITICAL)
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE: CVE-2021-26397
Published: 2023-05-09
Description: Insufficient address validation, may allow an
attacker with a compromised ABL and UApp to corrupt sensitive memory locations
potentially resulting in a loss of integrity or availability.








CVSS Score: 7.1 (HIGH)
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE: CVE-2021-26406
Published: 2023-05-09
Description: Insufficient validation in parsing Owner's
Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization)
and SEV-ES user application can lead to a host crash potentially resulting in
denial of service.





CVSS Score: 7.5 (HIGH)
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE: CVE-2021-46749
Published: 2023-05-09
Description: Insufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in SMI (System Management
Interface) mailbox checksum calculation triggering a data abort, resulting in a
potential denial of service.





CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE: CVE-2021-46753
Published: 2023-05-09
Description: Failure to validate the length fields of the ASP
(AMD Secure Processor) sensor fusion hub headers may allow an attacker with a
malicious Uapp or ABL to map the ASP sensor fusion hub region and overwrite
data structures leading to a potential loss of confidentiality and integrity.





CVSS Score: 9.1 (CRITICAL)
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE: CVE-2021-46762
Published: 2023-05-09
Description: Insufficient input validation in the SMU may
allow an attacker to corrupt SMU SRAM potentially leading to a loss of
integrity or denial of service.
CVSS Score: 3.9 (LOW)
CWE: CWE-20
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE: CVE-2021-46763
Published: 2023-05-09
Description: Insufficient input validation in the SMU may
enable a privileged attacker to write beyond the intended bounds of a shared
memory buffer potentially leading to a loss of integrity.








CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE: CVE-2021-46764
Published: 2023-05-09
Description: Improper validation of DRAM addresses in SMU may
allow an attacker to overwrite sensitive memory locations within the ASP
potentially resulting in a denial of service.












CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE: CVE-2021-46769
Published: 2023-05-09
Description: Insufficient syscall input validation in the ASP
Bootloader may allow a privileged attacker to execute arbitrary DMA copies,
which can lead to code execution. 
















CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE: CVE-2021-46775
Published: 2023-05-09
Description: Improper input validation in ABL may enable an
attacker with physical access, to perform arbitrary memory overwrites,
potentially leading to a loss of integrity and code execution.



 
















CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE: CVE-2022-23818
Published: 2023-05-09
Description: Insufficient input validation on the model
specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP guest
memory integrity.







 
















CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE: CVE-2023-20520
Published: 2023-05-09
Description: Improper access control settings in ASP
Bootloader may allow an attacker to corrupt the return address causing a
stack-based buffer overrun potentially leading to arbitrary code execution.








CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE: CVE-2023-20524
Published: 2023-05-09
Description: An attacker with a compromised ASP could
possibly send malformed commands to an ASP on another CPU, resulting in an out
of bounds write, potentially leading to a loss a loss of integrity.








CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE: CVE-2021-46754
Published: 2023-05-09
Description: Insufficient input validation in the ASP (AMD
Secure Processor) bootloader may allow an attacker with a compromised Uapp or
ABL to coerce the bootloader into exposing sensitive information to the SMU
(System Management Unit) resulting in a potential loss of confidentiality and
integrity.









CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE: CVE-2021-46755
Published: 2023-05-09
Description: Failure to unmap certain SysHub mappings in
error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker
with a malicious bootloader to exhaust the SysHub resources resulting in a
potential denial of service.





CVSS Score: 7.5 (HIGH)
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE: CVE-2021-46756
Published: 2023-05-09
Description: Insufficient validation of inputs in
SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an
attacker with a malicious Uapp or ABL to send malformed or invalid syscall to
the bootloader resulting in a potential denial of service and loss of
integrity.









CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE: CVE-2021-46759
Published: 2023-05-09
Description: Improper syscall input validation in AMD TEE
(Trusted Execution Environment) may allow an attacker with physical access and
control of a Uapp that runs under the bootloader to reveal the contents of the
ASP (AMD Secure Processor) bootloader accessible memory to a serial port,
resulting in a potential loss of integrity.













CVSS Score: 6.1 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE: CVE-2021-46760
Published: 2023-05-09
Description: A malicious or compromised UApp or ABL can send
a malformed system call to the bootloader, which may result in an out-of-bounds
memory access that may potentially lead to an attacker leaking sensitive
information or achieving code execution.





CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-770
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE: CVE-2021-46765
Published: 2023-05-09
Description: Insufficient input validation in ASP may allow
an attacker with a compromised SMM to induce out-of-bounds memory reads within
the ASP, potentially leading to a denial of service.





CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE: CVE-2021-46773
Published: 2023-05-09
Description: Insufficient input validation in ABL may enable
a privileged attacker to corrupt ASP memory, potentially resulting in a loss of
integrity or code execution.





CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE: CVE-2021-46792
Published: 2023-05-09
Description: Time-of-check Time-of-use (TOCTOU) in the
BIOS2PSP command may allow an attacker with a malicious BIOS to create a race
condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon
an S3 resume event potentially leading to a denial of service.





CVSS Score: 5.9 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE: CVE-2021-46794
Published: 2023-05-09
Description: Insufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in SMI (System Management
Interface) mailbox checksum calculation triggering a data abort, resulting in a
potential denial of service.





CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE: CVE-2023-25831
Published: 2023-05-09
Description: There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1and below which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.esri.com/en-us/patches-updates/2023/portal-for-arcgis-security-2023-update-1-patch-8095; https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for-arcgis-security-2023-update-1-patch-is-now-available/; https://support.esri.com/en-us/patches-updates/2023/portal-for-arcgis-security-2023-update-1-patch-8095
CVE: CVE-2023-25832
Published: 2023-05-09
Description: There is a cross-site-request forgery vulnerability in Esri Portal for ArcGIS Versions 11.0 and below that may allow an attacker to trick an authorized user into executing unwanted actions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://support.esri.com/en-us/patches-updates/2023/portal-for-arcgis-security-2023-update-1-patch-8095; https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for-arcgis-security-2023-update-1-patch-is-now-available/; https://support.esri.com/en-us/patches-updates/2023/portal-for-arcgis-security-2023-update-1-patch-8095
CVE: CVE-2023-30056
Published: 2023-05-09
Description: A session takeover vulnerability exists in FICO Origination Manager Decision Module 4.8.1 due to insufficient protection of the JSESSIONID cookie.
CVSS Score: 7.5 (HIGH)
CWE: CWE-384, CWE-384
References: http://fico.com; http://origination.com; https://packetstormsecurity.com/files/172192/FICO-Origination-Manager-Decision-Module-4.8.1-XSS-Session-Hijacking.html
CVE: CVE-2023-30057
Published: 2023-05-09
Description: Multiple stored cross-site scripting (XSS) vulnerabilities in FICO Origination Manager Decision Module 4.8.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://fico.com; http://origination.com; https://packetstormsecurity.com/files/172192/FICO-Origination-Manager-Decision-Module-4.8.1-XSS-Session-Hijacking.html
CVE: CVE-2023-28125
Published: 2023-05-09
Description: An improper authentication vulnerability exists in Avalanche Premise versions 6.3.x and below that could allow an attacker to gain access to the server by registering to receive messages from the server and perform an authentication bypass.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-287, CWE-362
References: https://forums.ivanti.com/s/article/ZDI-CAN-17729-CVE-2023-28125-Bug-958437-ZDI-CAN-17729-Ivanti-Avalanche-InfoRail-Authentication-Bypass-Vulnerability?language=en_US; https://forums.ivanti.com/s/article/ZDI-CAN-17729-CVE-2023-28125-Bug-958437-ZDI-CAN-17729-Ivanti-Avalanche-InfoRail-Authentication-Bypass-Vulnerability?language=en_US
CVE: CVE-2023-28126
Published: 2023-05-09
Description: An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploiting the SetUser method or can exploit the Race Condition in the authentication message.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-305, CWE-362, CWE-362
References: https://forums.ivanti.com/s/article/ZDI-CAN-17750-Ivanti-Avalanche-EnterpriseServer-GetSettings-Exposed-Dangerous-Method-Authentication-Bypass-Vulnerability?language=en_US; https://forums.ivanti.com/s/article/ZDI-CAN-17750-Ivanti-Avalanche-EnterpriseServer-GetSettings-Exposed-Dangerous-Method-Authentication-Bypass-Vulnerability?language=en_US
CVE: CVE-2023-28127
Published: 2023-05-09
Description: A path traversal vulnerability exists in Avalanche version 6.3.x and below that when exploited could result in possible information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://forums.ivanti.com/s/article/ZDI-CAN-17769-Ivanti-Avalanche-getLogFile-Directory-Traversal-Information-Disclosure?language=en_US; https://forums.ivanti.com/s/article/ZDI-CAN-17769-Ivanti-Avalanche-getLogFile-Directory-Traversal-Information-Disclosure?language=en_US