CVE Catalog

CVE-2023-39402

CriticalCVSS 9.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.40%

32th percentile - higher than 32% of all known CVEs

Summary

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

Risk Assessment

The organization may be exposed to unauthorized access to sensitive data, potentially leading to security breaches and loss of confidentiality.

Recommendation

It is recommended to update the installd module to the latest version and implement additional security measures to restrict access to sandbox files.

Original NVD description (English source)

Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS