Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2023-20274

A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An attacker could exploit this vulnerability by modifying objects in the PHP Agent install directory, which would run with the same privileges as PHP. A successful exploit could allow a lower-privileged attacker to elevate their privileges to root on an affected device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco AppDynamics

  • 21.2.7affected
  • 21.2.8affected
  • 21.4.0affected
  • 21.4.10affected
  • 21.4.11affected
  • 21.4.2affected
  • 21.4.3affected
  • 21.4.4affected
  • 21.4.5affected
  • 21.4.6affected
  • 21.4.7affected
  • 21.4.8affected
  • 21.4.9affected
  • 21.5.0affected
  • 21.6.0affected
  • 22.1.0affected
  • 22.1.1affected
  • 22.11.0affected
  • 22.3.0affected
  • 22.10.0affected
  • 22.12.0affected
  • 22.12.1affected
  • 21.7.0affected
  • 22.8.0affected
  • 23.2.0affected
  • 23.4.0affected

References