CVE-2023-5936

Unsafe temporary data privileges on Unix systems in Arc before v1.6.0

Severity Score

7.3

*CVSS v4

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track*

*SSVC

Descriptions

On Unix systems (Linux, MacOS), Arc uses a temporary file with unsafe privileges.

By tampering with such file, a malicious local user in the system may be able to trigger arbitrary code execution with root privileges.

En sistemas Unix (Linux, MacOS), Arc utiliza un archivo temporal con privilegios inseguros. Al alterar dicho archivo, un usuario local malicioso en el sistema puede desencadenar la ejecución de código arbitrario con privilegios de root.

*Credits: This issue was found by Diego Giubertoni of Nozomi Networks Security Research team during an internal penetration testing session.

Attack Vector

Local

Attack Complexity

Low

Attack Requirements

Present

Privileges Required

Low

User Interaction

Passive

System

Vulnerable | Subsequent

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:Track*

Exploitation

None

Automatable

Tech. Impact

Total

* Organization's Worst-case Scenario

Timeline

2023-11-02 CVE Reserved
2024-05-15 CVE Published
2024-05-16 EPSS Updated
2024-08-02 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-732: Incorrect Permission Assignment for Critical Resource

CAPEC

CAPEC-180: Exploiting Incorrectly Configured Access Control Security Levels

References (1)

URL	Tag	Source
https://security.nozominetworks.com/NN-2023:14-01

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Nozomi Networks Search vendor "Nozomi Networks"		Arc Search vendor "Nozomi Networks" for product "Arc"				< 1.6.0 Search vendor "Nozomi Networks" for product "Arc" and version " < 1.6.0"		en		Affected