high7.6
CVE-2023-4003
One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an u…
Impact
One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an unspecified method. CWE-250: Execution with Unnecessary Privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oneidentity | Password Manager | from 5.9.7.1 before 5.11.2 from 5.12.0 before 5.12.2 |