Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator.
References
| Link | Resource |
|---|---|
| https://help.supportservices.fabasoft.com/index.php?topic=doc/Vulnerabilities-Fabasoft-Folio/vulnerabilities-2023.htm#client-autoupdate-harmful-code-installation-vulnerability-pdo06614- | Mitigation Vendor Advisory |
| https://www.compass-security.com/fileadmin/Research/Advisories/2023_01_CSNC-2023-002_LPE_Cloud_Client.txt | Mitigation Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
08 Aug 2023, 18:20
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Microsoft
Fabasoft Fabasoft cloud Enterprise Client Fabasoft cloud Fabasoft folio \/ Egov-suite Microsoft windows |
|
| CPE | cpe:2.3:a:fabasoft:folio_\/_egov-suite:2022:update_rollup_3:*:*:*:*:*:* cpe:2.3:a:fabasoft:folio_\/_egov-suite:2023:-:*:*:*:*:*:* cpe:2.3:a:fabasoft:cloud_enterprise_client:23.3.0.130:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:fabasoft:folio_\/_egov-suite:2023:update_rollup_1:*:*:*:*:*:* cpe:2.3:a:fabasoft:folio_\/_egov-suite:2021:update_rollup_3:*:*:*:*:*:* cpe:2.3:a:fabasoft:folio_\/_egov-suite:2022:-:*:*:*:*:*:* cpe:2.3:a:fabasoft:cloud:-:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| References | (MISC) https://www.compass-security.com/fileadmin/Research/Advisories/2023_01_CSNC-2023-002_LPE_Cloud_Client.txt - Mitigation, Third Party Advisory | |
| References | (MISC) https://help.supportservices.fabasoft.com/index.php?topic=doc/Vulnerabilities-Fabasoft-Folio/vulnerabilities-2023.htm#client-autoupdate-harmful-code-installation-vulnerability-pdo06614- - Mitigation, Vendor Advisory |
03 Aug 2023, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-03 18:15
Updated : 2024-02-28 20:33
NVD link : CVE-2023-32764
Mitre link : CVE-2023-32764
CVE.ORG link : CVE-2023-32764
JSON object : View
Products Affected
fabasoft
- cloud
- cloud_enterprise_client
- folio_\/_egov-suite
microsoft
- windows
CWE