CVE-2023-33898
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.
Risk Assessment
The lack of proper security measures may allow unauthorized users to access sensitive data, posing a threat to the privacy and security of the organization.
Recommendation
It is recommended to implement appropriate permission checks in the telephony service to prevent unauthorized access to information.
Other vulnerabilities in Usługa telekomunikacyjna
See all- CVE-2023-33899Medium
In the telephony service, there is a missing permission check, which could lead to local information disclosure with no additional execution privileges needed.
- CVE-2023-33890Medium
In the telephony service, there is a missing permission check, which could lead to local information disclosure with no additional execution privileges needed.
- CVE-2023-33881Medium
In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.
Original NVD description (English source)
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS