CVE-2023-42698

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Dec 4, 2023
Updated: Dec 7, 2023
CWE ID 862

Summary

CVE-2023-42698 is a vulnerability in the omacp service that affects multiple products, including lAMRr5, nn8kgA, sYyJEm, sYyJEl, sYyJE8, and fWGaF5. The vulnerability allows for the writing of permission usage records of an app without proper permission checks, potentially resulting in local information disclosure. The exploitability score is 1.8 out of 10, indicating a low level of difficulty for attackers to exploit this vulnerability. The base severity is medium with a score of 5.5 out of 10. Although the attack vector is local and privileges required are low, the potential impact on confidentiality is high. It is important for organizations using the affected products to remediate this vulnerability promptly to prevent unauthorized access to sensitive information.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-42698 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options