CVE-2023-29586

Katalog CVE

CVSS 5.5 · Medium EPSS 0,32%

Kerentanan Improper Access Control pada codesector teracopy. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Code Sector TeraCopy 3.9.7 does not perform proper access validation on the source folder during a copy operation. This leads to Arbitrary File Read by allowing any user to copy any directory in the system to a directory they control. NOTE: the Supplier disputes this because only admin users can copy arbitrary folders, and because the 143984 reference is about a different concern (unrelated to directory copying) that was fixed in 3.5b.

Rincian

Terbit di NVD

19 April 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control

EPSS (30 hari)

0,32% peluang dieksploitasi; lebih tinggi dari 22,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://packetstormsecurity.com/files/143984/TeraCopyService-3.1-Unquoted-Service-Path-Privilege-Escalation.ht... not applicable
• https://securityandstuff.com/posts/teracopy_arbitrary_read/ broken link
• https://support.codesector.com/en/articles/10088479-cve-2023-29586
• https://www.youtube.com/watch?v=mrOHtWWFhJI