Skip to main content

Unison Software CVE-2023-22663

HIGH
Improper Authentication (CWE-287)
2023-11-14 secure@intel.com
8.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.8 HIGH
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Nov 14, 2023 - 19:15 nvd
HIGH 8.8

DescriptionNVD

Improper authentication for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access.

AnalysisAI

Improper authentication for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. Improper authentication for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access. Affected products include: Intel Unison Software.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.

CVE-2023-39412 HIGH
8.8 Nov 14

Cross-site request forgery in some Intel Unison software may allow an authenticated user to potentially enable escalatio

CVE-2023-39221 HIGH
8.8 Nov 14

Improper access control for some Intel Unison software may allow an authenticated user to potentially enable escalation

CVE-2023-36860 HIGH
8.8 Nov 14

Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalatio

CVE-2023-38570 HIGH
7.8 Nov 14

Access of memory location after end of buffer for some Intel Unison software may allow an authenticated user to potentia

CVE-2023-22292 HIGH
7.8 Nov 14

Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable escalation of pr

CVE-2023-39228 HIGH
7.5 Nov 14

Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of

CVE-2023-22337 HIGH
7.5 Nov 14

Improper input validation for some Intel Unison software may allow an unauthenticated user to potentially enable denial

CVE-2023-22285 HIGH
7.5 Nov 14

Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of

CVE-2023-22448 HIGH
7.2 Nov 14

Improper access control for some Intel Unison software may allow a privileged user to potentially enable escalation of p

CVE-2023-38131 MEDIUM
6.5 Nov 14

Improper input validationation for some Intel Unison software may allow an authenticated user to potentially enable deni

CVE-2023-22290 MEDIUM
6.5 Nov 14

Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable denial of servic

CVE-2023-39411 MEDIUM
4.4 Nov 14

Improper input validationation for some Intel Unison software may allow a privileged user to potentially enable denial o

Share

CVE-2023-22663 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy