CVE-2023-2679

EUVD-2023-34143
Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.1 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
SnowCNA
4.1 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 31%
Affected Products (NVD)
VendorProductVersion
snowsoftwaresnow_license_manager
9.27 ≤
𝑥
< 9.30
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://community.snowsoftware.com/s/feed/0D56M00009Ex9dySAB
https://community.snowsoftware.com/s/feed/0D56M00009Ex9dySAB