CVE-2023-42714

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Dec 4, 2023
Updated: Dec 7, 2023
CWE ID 862

Summary

CVE-2023-42714 is a vulnerability affecting a firewall service where there is a missing permission check. This issue allows an application to write permission usage records, leading to local information disclosure without requiring any additional execution privileges. An attacker could potentially exploit this vulnerability to gain insight into protected system information. The lack of proper permission checks in the firewall service increases the risk of information leakage and should be addressed promptly through updates or patches.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share