CVE-2023-3096
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
A critical vulnerability was found in KylinSoft kylin-software-properties on KylinOS, affecting the changedSource function. Manipulation of this function leads to improper access controls.
Risk Assessment
An attack on this vulnerability must be approached locally, increasing the risk for systems that have not been updated. The public disclosure of the exploit may lead to its use by third parties.
Recommendation
It is recommended to upgrade to version 0.0.1-130 to address this vulnerability. Additionally, systems should be monitored for unauthorized access.
Original NVD description (English source)
A vulnerability was found in KylinSoft kylin-software-properties on KylinOS. It has been declared as critical. This vulnerability affects the function changedSource. The manipulation leads to improper access controls. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 0.0.1-130 is able to address this issue. It is recommended to upgrade the affected component. VDB-230686 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.