CVE-2023-30657

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jul 6, 2023
Updated: Nov 7, 2023
CWE ID 20

Summary

CVE-2023-30657 is a vulnerability affecting EnhancedAttestationResult prior to the Jul-2023 Release 1. Attackers can exploit this improper input validation issue to launch privileged activities locally. This means that an attacker who has already gained access to the system can potentially escalate their privileges, leading to significant security risks. Organizations using the affected version are encouraged to update as soon as possible to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share