CVE Catalog

CVE-2023-3252

MediumCVSS 6.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.60%

44th percentile - higher than 44% of all known CVEs

Summary

An arbitrary file write vulnerability allows an authenticated, remote attacker with administrator privileges to alter logging variables to overwrite arbitrary files on the remote host with log data.

Risk Assessment

This could lead to a denial of service condition, affecting system availability and potentially disrupting its operation.

Recommendation

It is recommended to restrict access to logging variables and monitor administrator privileges to prevent abuse.

Original NVD description (English source)

An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges could alter logging variables to overwrite arbitrary files on the remote host with log data, which could lead to a denial of service condition.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS