CVE-2023-43081

CVSS 3.1 Score 3.3 of 10 (low)

Details

Published Nov 22, 2023
Updated: Nov 27, 2023
CWE ID 276

Summary

CVE-2023-43081 is a vulnerability found in PowerProtect Agent for File System Version 19.14 and earlier versions. The vulnerability lies in the ddfscon component, which has an incorrect default permissions issue. A local attacker with low privileges could exploit this vulnerability to overwrite log files. The risk score for this vulnerability is 5, indicating a moderate level of risk. The base severity is assessed as low, with a base score of 3.3. The attack vector is local, and the impact on integrity is considered low, with no impact on confidentiality. Remediation for this vulnerability involves updating to a version of PowerProtect Agent for File System that is later than 19.14 to fix the incorrect default permissions issue and mitigate the risk of exploitation.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-43081 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options