CVE-2023-1164 HIGH

CVE-2023-1164: KylinSoft kylin-activation File Import improper authorization

Vendor Kylinsoft
Product kylin-activation
Weakness CWE-285
Published March 3, 2023
Last update November 25, 2024
View on NVD All CVEs

CVSS base score

8.4/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A vulnerability was found in KylinSoft kylin-activation on KylinOS and classified as critical. Affected by this issue is some unknown functionality of the component File Import. The manipulation leads to improper authorization. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 1.3.11-23 and 1.30.10-5.p23 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-222260.

Key dates

02Disclosure timeline

March 3, 2023 CVE published
November 25, 2024 Record updated