Powershell CVE-2023-36013

MEDIUM

Use of Hard-coded Credentials (CWE-798)

2023-11-20 secure@microsoft.com

Information Disclosure Authentication Bypass Powershell

6.5

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

1

CVE Published

Nov 20, 2023 - 16:15 nvd

MEDIUM 6.5

DescriptionNVD

PowerShell Information Disclosure Vulnerability

AnalysisAI

PowerShell Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Use of Hard-coded Credentials vulnerability could allow attackers to gain access using credentials embedded in source code.

Technical ContextAI

This vulnerability is classified as Use of Hard-coded Credentials (CWE-798), which allows attackers to gain access using credentials embedded in source code. Affected products include: Microsoft Powershell.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Remove hard-coded credentials, use environment variables or secrets management, rotate exposed credentials immediately.

More in Powershell

View all

CVE-2018-8327 CRITICAL Act Now

A remote code execution vulnerability exists in PowerShell Editor Services, aka "PowerShell Editor Services Remote Code

CVE-2022-41076 HIGH This Week

PowerShell Remote Code Execution Vulnerability. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitab

CVE-2022-41121 HIGH This Week

Windows Graphics Component Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is l

CVE-2022-26788 HIGH This Week

PowerShell Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack comple

CVE-2025-30399 HIGH This Week

CVE-2025-30399 is an untrusted search path vulnerability in .NET and Visual Studio that allows unauthenticated remote at

CVE-2023-21538 HIGH This Week

.NET Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no aut

CVE-2022-23267 HIGH This Week

.NET and Visual Studio Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely e

CVE-2020-1108 HIGH This Week

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Cor

CVE-2020-0951 MEDIUM This Month

<p>A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an at

CVE-2020-8927 MEDIUM This Month

A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of

CVE-2022-24512 MEDIUM This Month

.NET and Visual Studio Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.3), this vulnerability is remo

CVE-2022-34716 MEDIUM This Month

.NET Spoofing Vulnerability. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentica

Same weakness CWE-798 – Use of Hard-coded Credentials

View all

CVE-2016-1560 CRITICAL POC

CVE-2017-14143 CRITICAL POC

CVE-2026-22769 CRITICAL

CVE-2016-5678 CRITICAL POC

CVE-2017-6558 CRITICAL POC

CVE-2015-7246 CRITICAL POC

CVE-2015-4667 CRITICAL POC

CVE-2016-10177 CRITICAL POC

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

CVE-2023-7028 CRITICAL POC

CVE-2017-0213 HIGH POC

Share

CVE-2023-36013 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy