The FACSChorus software does not properly assign data... · CVE-2023-29066 · GitHub Advisory Database · GitHub

The FACSChorus software does not properly assign data...

Low severity Unreviewed Published Nov 28, 2023 to the GitHub Advisory Database • Updated Dec 5, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

The FACSChorus software does not properly assign data access privileges for operating system user accounts. A non-administrative OS account can modify information stored in the local application data folders.

References

Published by the National Vulnerability Database

Nov 28, 2023

Published to the GitHub Advisory Database Nov 28, 2023

Last updated Dec 5, 2023

Severity

Low

3.2

/ 10

CVSS base metrics

Attack vector

Physical

Attack complexity

Low

Privileges required

Low

User interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

Low

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L