PT-2022-6987 · Unknown · Keyinstall

CVE-2023-20780

·

Published

2022-10-28

·

Updated

2023-08-09

CVSS v2.0

4.6

Medium

VectorAV:L/AC:L/Au:S/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions keyinstall (affected versions not specified)
Description The issue is related to a missing bounds check in keyinstall, which could lead to local information disclosure. System execution privileges are needed for exploitation, and user interaction is not required. The vulnerability is associated with insufficient protection of service data due to incorrect input validation.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ASB-A-285686353
BDU:2023-06153
CVE-2023-20780
M-ALPS08017756

Affected Products

Keyinstall