Vulnerabilites related to flexera - installshield
cve-2023-29081
Vulnerability from cvelistv5
Published
2024-01-26 20:02
Modified
2024-08-02 14:00
Severity ?
EPSS score ?
Summary
A vulnerability has been reported in Suite Setups built with versions prior to InstallShield 2023 R2. This vulnerability may allow locally authenticated users to cause a Denial of Service (DoS) condition when handling move operations on local, temporary folders.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Revenera | InstallShield |
Version: 2023 R1 ≤ |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T14:00:15.129Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://community.flexera.com/t5/InstallShield-Knowledge-Base/CVE-2023-29081-InstallShield-Symlink-Vulnerability-Affecting/ta-p/305052"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "InstallShield",
"vendor": "Revenera",
"versions": [
{
"lessThan": "2023 R2",
"status": "affected",
"version": "2023 R1",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A vulnerability has been reported in Suite Setups built with versions prior to InstallShield 2023 R2. This vulnerability may allow locally authenticated users to cause a Denial of Service (DoS) condition when handling move operations on local, temporary folders."
}
],
"value": "A vulnerability has been reported in Suite Setups built with versions prior to InstallShield 2023 R2. This vulnerability may allow locally authenticated users to cause a Denial of Service (DoS) condition when handling move operations on local, temporary folders."
}
],
"impacts": [
{
"capecId": "CAPEC-132",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-132 Symlink Attack"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-276",
"description": "CWE-276 Incorrect Default Permissions",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-01-26T20:02:50.978Z",
"orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
"shortName": "flexera"
},
"references": [
{
"url": "https://community.flexera.com/t5/InstallShield-Knowledge-Base/CVE-2023-29081-InstallShield-Symlink-Vulnerability-Affecting/ta-p/305052"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "InstallShield Symlink Vulnerability Affecting Suite Project Setups",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
"assignerShortName": "flexera",
"cveId": "CVE-2023-29081",
"datePublished": "2024-01-26T20:02:50.978Z",
"dateReserved": "2023-03-30T23:42:11.691Z",
"dateUpdated": "2024-08-02T14:00:15.129Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2016-2542
Vulnerability from cvelistv5
Published
2016-02-24 02:00
Modified
2024-08-05 23:32
Severity ?
EPSS score ?
Summary
Untrusted search path vulnerability in Flexera InstallShield through 2015 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory of a setup-launcher executable file.
References
| ▼ | URL | Tags |
|---|---|---|
| http://www.securitytracker.com/id/1035097 | vdb-entry, x_refsource_SECTRACK | |
| http://www.securityfocus.com/bid/84213 | vdb-entry, x_refsource_BID | |
| https://www.tenable.com/security/tns-2019-08 | x_refsource_CONFIRM | |
| https://www.oracle.com/security-alerts/cpuApr2021.html | x_refsource_MISC | |
| https://flexeracommunity.force.com/customer/articles/INFO/Best-Practices-to-Avoid-Windows-Setup-Launcher-Executable-Issues | x_refsource_CONFIRM | |
| https://us-cert.cisa.gov/ics/advisories/icsa-20-287-03 | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T23:32:20.876Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1035097",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1035097"
},
{
"name": "84213",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/84213"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://www.tenable.com/security/tns-2019-08"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://flexeracommunity.force.com/customer/articles/INFO/Best-Practices-to-Avoid-Windows-Setup-Launcher-Executable-Issues"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-287-03"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-01-01T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Untrusted search path vulnerability in Flexera InstallShield through 2015 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory of a setup-launcher executable file."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-06-14T17:20:02",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "1035097",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1035097"
},
{
"name": "84213",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/84213"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://www.tenable.com/security/tns-2019-08"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://flexeracommunity.force.com/customer/articles/INFO/Best-Practices-to-Avoid-Windows-Setup-Launcher-Executable-Issues"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-287-03"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2016-2542",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Untrusted search path vulnerability in Flexera InstallShield through 2015 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory of a setup-launcher executable file."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1035097",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1035097"
},
{
"name": "84213",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/84213"
},
{
"name": "https://www.tenable.com/security/tns-2019-08",
"refsource": "CONFIRM",
"url": "https://www.tenable.com/security/tns-2019-08"
},
{
"name": "https://www.oracle.com/security-alerts/cpuApr2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"name": "https://flexeracommunity.force.com/customer/articles/INFO/Best-Practices-to-Avoid-Windows-Setup-Launcher-Executable-Issues",
"refsource": "CONFIRM",
"url": "https://flexeracommunity.force.com/customer/articles/INFO/Best-Practices-to-Avoid-Windows-Setup-Launcher-Executable-Issues"
},
{
"name": "https://us-cert.cisa.gov/ics/advisories/icsa-20-287-03",
"refsource": "MISC",
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-287-03"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2016-2542",
"datePublished": "2016-02-24T02:00:00",
"dateReserved": "2016-02-23T00:00:00",
"dateUpdated": "2024-08-05T23:32:20.876Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
Vulnerability from fkie_nvd
Published
2016-02-24 03:59
Modified
2024-11-21 02:48
Severity ?
Summary
Untrusted search path vulnerability in Flexera InstallShield through 2015 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory of a setup-launcher executable file.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| flexera | installshield | * | |
| flexera | installshield | 2015 | |
| flexera | installshield | 2015 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:flexera:installshield:*:*:*:*:*:*:*:*",
"matchCriteriaId": "63F2F9A0-2D2E-4832-875A-35C7AD6E0992",
"versionEndExcluding": "2015",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2015:-:*:*:*:*:*:*",
"matchCriteriaId": "E15C2C15-13A4-451E-9A58-69B617222CC4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2015:sp1:*:*:*:*:*:*",
"matchCriteriaId": "ED834A3A-05FD-4BC0-BF57-74E60525905D",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Untrusted search path vulnerability in Flexera InstallShield through 2015 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory of a setup-launcher executable file."
},
{
"lang": "es",
"value": "Vulnerabilidad de b\u00fasqueda de ruta no confiable en Flexera InstallShield hasta la versi\u00f3n 2015 SP1 permite a usuarios locales obtener privilegios a trav\u00e9s de un Troyano DLL en el directorio de trabajo actual de un archivo de lanzamiento de configuraci\u00f3n ejecutable."
}
],
"evaluatorComment": "CWE-426: Untrusted Search Path - http://cwe.mitre.org/data/definitions/426.html",
"id": "CVE-2016-2542",
"lastModified": "2024-11-21T02:48:39.563",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2016-02-24T03:59:02.070",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/84213"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1035097"
},
{
"source": "cve@mitre.org",
"tags": [
"Technical Description",
"Third Party Advisory"
],
"url": "https://flexeracommunity.force.com/customer/articles/INFO/Best-Practices-to-Avoid-Windows-Setup-Launcher-Executable-Issues"
},
{
"source": "cve@mitre.org",
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-287-03"
},
{
"source": "cve@mitre.org",
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://www.tenable.com/security/tns-2019-08"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/84213"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1035097"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Technical Description",
"Third Party Advisory"
],
"url": "https://flexeracommunity.force.com/customer/articles/INFO/Best-Practices-to-Avoid-Windows-Setup-Launcher-Executable-Issues"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-287-03"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://www.tenable.com/security/tns-2019-08"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2024-01-26 20:15
Modified
2024-11-21 07:56
Severity ?
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Summary
A vulnerability has been reported in Suite Setups built with versions prior to InstallShield 2023 R2. This vulnerability may allow locally authenticated users to cause a Denial of Service (DoS) condition when handling move operations on local, temporary folders.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| flexera | installshield | 2016 | |
| flexera | installshield | 2016 | |
| flexera | installshield | 2016 | |
| flexera | installshield | 2017 | |
| flexera | installshield | 2017 | |
| flexera | installshield | 2018 | |
| flexera | installshield | 2018 | |
| flexera | installshield | 2018 | |
| flexera | installshield | 2019 | |
| flexera | installshield | 2019 | |
| flexera | installshield | 2019 | |
| flexera | installshield | 2020 | |
| flexera | installshield | 2020 | |
| flexera | installshield | 2020 | |
| flexera | installshield | 2020 | |
| flexera | installshield | 2021 | |
| flexera | installshield | 2021 | |
| flexera | installshield | 2022 | |
| flexera | installshield | 2022 | |
| flexera | installshield | 2023 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:flexera:installshield:2016:-:*:*:*:*:*:*",
"matchCriteriaId": "2299BAF1-82E5-4CA7-BCB1-FD1F16085302",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2016:sp1:*:*:*:*:*:*",
"matchCriteriaId": "7749B2BA-33C7-40BB-9FFF-43C5CD26F18A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2016:sp2:*:*:*:*:*:*",
"matchCriteriaId": "95D01D5F-6885-4A49-B17B-FD6D578CDFA5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2017:-:*:*:*:*:*:*",
"matchCriteriaId": "1B65E118-B78D-4439-A100-AEECAC08287F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2017:sp1:*:*:*:*:*:*",
"matchCriteriaId": "C5D3D504-041B-498D-89A5-44480F973736",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2018:-:*:*:*:*:*:*",
"matchCriteriaId": "731C306D-F2EB-4FA5-92FB-E171DA348D5E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2018:r2:*:*:*:*:*:*",
"matchCriteriaId": "5551FBFE-1E40-42E4-8A6C-2F1D81B48806",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2018:sp1:*:*:*:*:*:*",
"matchCriteriaId": "8CA62BA4-3A62-4FF2-BAD7-B952B0B4F820",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2019:-:*:*:*:*:*:*",
"matchCriteriaId": "C1A819BD-CE66-4A79-AC86-7EC18EF16C74",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2019:r2:*:*:*:*:*:*",
"matchCriteriaId": "8818A1F2-8322-4866-8AE5-758EDBEF29CA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2019:r3:*:*:*:*:*:*",
"matchCriteriaId": "53EAD18C-B4E6-4AC8-8AE3-E9ED91CD8501",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2020:-:*:*:*:*:*:*",
"matchCriteriaId": "00D5FB38-28FF-468D-991D-D2B8647847F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2020:r2:*:*:*:*:*:*",
"matchCriteriaId": "4CC709D9-6726-45F0-B5DB-8C752098F0D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2020:r3:*:*:*:*:*:*",
"matchCriteriaId": "4FE45C4B-CA42-4BEA-BA95-1E9FBD00F01E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2020:r3sp1:*:*:*:*:*:*",
"matchCriteriaId": "9D6AB162-11B2-42B7-86FE-5250A6E7BFA1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2021:r1:*:*:*:*:*:*",
"matchCriteriaId": "02886A04-411B-4693-83E4-14CC421F85B1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2021:r2:*:*:*:*:*:*",
"matchCriteriaId": "F1B7662F-3536-4D59-B7F1-32312A4AAA78",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2022:r1:*:*:*:*:*:*",
"matchCriteriaId": "E691BE8F-360B-4072-91BC-2DC54FA6D709",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2022:r2:*:*:*:*:*:*",
"matchCriteriaId": "3644689A-6FD2-415F-B737-9B2851620000",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:flexera:installshield:2023:r1:*:*:*:*:*:*",
"matchCriteriaId": "C5831778-D628-44BF-9341-97C92DE926B1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been reported in Suite Setups built with versions prior to InstallShield 2023 R2. This vulnerability may allow locally authenticated users to cause a Denial of Service (DoS) condition when handling move operations on local, temporary folders."
},
{
"lang": "es",
"value": "Se ha informado de una vulnerabilidad en Suite Setups creadas con versiones anteriores a InstallShield 2023 R2. Esta vulnerabilidad puede permitir que los usuarios autenticados localmente provoquen una condici\u00f3n de denegaci\u00f3n de servicio (DoS) al manejar operaciones de movimiento en carpetas locales temporales."
}
],
"id": "CVE-2023-29081",
"lastModified": "2024-11-21T07:56:30.530",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6,
"source": "PSIRT-CNA@flexerasoftware.com",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2024-01-26T20:15:54.187",
"references": [
{
"source": "PSIRT-CNA@flexerasoftware.com",
"tags": [
"Third Party Advisory"
],
"url": "https://community.flexera.com/t5/InstallShield-Knowledge-Base/CVE-2023-29081-InstallShield-Symlink-Vulnerability-Affecting/ta-p/305052"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://community.flexera.com/t5/InstallShield-Knowledge-Base/CVE-2023-29081-InstallShield-Symlink-Vulnerability-Affecting/ta-p/305052"
}
],
"sourceIdentifier": "PSIRT-CNA@flexerasoftware.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-276"
}
],
"source": "PSIRT-CNA@flexerasoftware.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-276"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}