CVE-2023-21321

Summary

CVE-2023-21321 is a vulnerability affecting the Package Manager, where a missing permission check can result in cross-user settings disclosure. This issue allows for the disclosure of local information without requiring any additional execution privileges or user interaction. Exploitation of this vulnerability is possible without the target user's knowledge or involvement.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.