CVE-2023-39399
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.
Risk Assessment
The organization may be exposed to unauthorized access to sensitive data, potentially leading to serious security breaches.
Recommendation
It is recommended to update the software and implement additional security measures to restrict access to sandbox files.
Other vulnerabilities in installd module
See all- CVE-2023-39403Critical
There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.
- CVE-2023-39402Critical
There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.
- CVE-2023-39401Critical
There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.
- CVE-2023-39400Critical
There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.
- CVE-2023-39398Critical
There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.
Original NVD description (English source)
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.