Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2023-4003

One Identity Password Manager version 5.9.7.1 - Unauthenticated physical access privilege escalation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCD

Description

One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an unspecified method. CWE-250: Execution with Unnecessary Privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

One One

Default version status: unaffected

  • version 5.9.7.1 to ≤ upgrade to versions 5.12.2, 5.11.2 or 5.13affected

References