Local privilege escalation due to a DLL hijacking... · CVE-2023-2355 · GitHub Advisory Database · GitHub

Local privilege escalation due to a DLL hijacking...

Moderate severity Unreviewed Published Apr 27, 2023 to the GitHub Advisory Database • Updated Nov 12, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Local privilege escalation due to a DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 3900.

References

Published by the National Vulnerability Database

Apr 27, 2023

Published to the GitHub Advisory Database Apr 27, 2023

Last updated Nov 12, 2023

Severity

Moderate

6.7

/ 10

CVSS base metrics

Attack vector

Local

Attack complexity

High

Privileges required

Low

User interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H