CVE-2023-21302

Summary

CVE-2023-21302 is a vulnerability affecting the Package Manager in certain software. It allows an attacker to determine if an application is installed on a system, bypassing query permissions, through side channel information disclosure. This local information disclosure can occur without the need for additional execution privileges or user interaction, making it a potential security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.