CVE-2023-32764

Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://help.supportservices.fabasoft.com/index.php?topic=doc/Vulnerabilities-Fabasoft-Folio/vulnerabilities-2023.htm#client-autoupdate-harmful-code-installation-vulnerability-pdo06614-	Mitigation Vendor Advisory
https://www.compass-security.com/fileadmin/Research/Advisories/2023_01_CSNC-2023-002_LPE_Cloud_Client.txt	Mitigation Third Party Advisory
https://help.supportservices.fabasoft.com/index.php?topic=doc/Vulnerabilities-Fabasoft-Folio/vulnerabilities-2023.htm#client-autoupdate-harmful-code-installation-vulnerability-pdo06614-	Mitigation Vendor Advisory
https://www.compass-security.com/fileadmin/Research/Advisories/2023_01_CSNC-2023-002_LPE_Cloud_Client.txt	Mitigation Third Party Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:fabasoft:cloud:-:::::::*
	cpe:2.3:a:fabasoft:cloud_enterprise_client:23.3.0.130:::::::*
	cpe:2.3:a:fabasoft:folio_\/_egov-suite:2021:update_rollup_3::::::
	cpe:2.3:a:fabasoft:folio_\/_egov-suite:2022:-::::::
	cpe:2.3:a:fabasoft:folio_\/_egov-suite:2022:update_rollup_3::::::
	cpe:2.3:a:fabasoft:folio_\/_egov-suite:2023:-::::::
	cpe:2.3:a:fabasoft:folio_\/_egov-suite:2023:update_rollup_1::::::

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

21 Nov 2024, 08:04

Type	Values Removed	Values Added
References	() https://help.supportservices.fabasoft.com/index.php?topic=doc/Vulnerabilities-Fabasoft-Folio/vulnerabilities-2023.htm#client-autoupdate-harmful-code-installation-vulnerability-pdo06614- - Mitigation, Vendor Advisory	() https://help.supportservices.fabasoft.com/index.php?topic=doc/Vulnerabilities-Fabasoft-Folio/vulnerabilities-2023.htm#client-autoupdate-harmful-code-installation-vulnerability-pdo06614- - Mitigation, Vendor Advisory
References	~~() https://www.compass-security.com/fileadmin/Research/Advisories/2023_01_CSNC-2023-002_LPE_Cloud_Client.txt - Mitigation, Third Party Advisory~~	() https://www.compass-security.com/fileadmin/Research/Advisories/2023_01_CSNC-2023-002_LPE_Cloud_Client.txt - Mitigation, Third Party Advisory

08 Aug 2023, 18:20

Type	Values Removed	Values Added
CPE		cpe:2.3:a:fabasoft:folio_\/_egov-suite:2022:update_rollup_3:::::: cpe:2.3:a:fabasoft:folio_\/_egov-suite:2023:-:::::: cpe:2.3:a:fabasoft:cloud_enterprise_client:23.3.0.130:::::::* cpe:2.3:o:microsoft:windows:-:::::::* cpe:2.3:a:fabasoft:folio_\/_egov-suite:2023:update_rollup_1:::::: cpe:2.3:a:fabasoft:folio_\/_egov-suite:2021:update_rollup_3:::::: cpe:2.3:a:fabasoft:folio_\/_egov-suite:2022:-:::::: cpe:2.3:a:fabasoft:cloud:-:::::::*
First Time		Microsoft Fabasoft Fabasoft cloud Enterprise Client Fabasoft cloud Fabasoft folio \/ Egov-suite Microsoft windows
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.8
References	~~(MISC) https://www.compass-security.com/fileadmin/Research/Advisories/2023_01_CSNC-2023-002_LPE_Cloud_Client.txt -~~	(MISC) https://www.compass-security.com/fileadmin/Research/Advisories/2023_01_CSNC-2023-002_LPE_Cloud_Client.txt - Mitigation, Third Party Advisory
References	~~(MISC) https://help.supportservices.fabasoft.com/index.php?topic=doc/Vulnerabilities-Fabasoft-Folio/vulnerabilities-2023.htm#client-autoupdate-harmful-code-installation-vulnerability-pdo06614- -~~	(MISC) https://help.supportservices.fabasoft.com/index.php?topic=doc/Vulnerabilities-Fabasoft-Folio/vulnerabilities-2023.htm#client-autoupdate-harmful-code-installation-vulnerability-pdo06614- - Mitigation, Vendor Advisory
CWE		NVD-CWE-noinfo

03 Aug 2023, 18:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-08-03 18:15

Updated : 2024-11-21 08:04

NVD link : CVE-2023-32764

Mitre link : CVE-2023-32764

CVE.ORG link : CVE-2023-32764

JSON object : View

Products Affected

fabasoft

cloud_enterprise_client
folio_\/_egov-suite
cloud

microsoft

windows

CWE

NVD-CWE-noinfo

7.8 /10