CVE-2023-22448

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Improper access control for some Intel Unison software may allow a privileged user to potentially enable escalation of privilege via network access.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Nov 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-224496.7Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via lCVE-2023-22456.3A vulnerability was found in hansunCMS 1.4.3. It has been declared as critical. This vulnerability affects unknown code of the file /ueditorCVE-2023-224507.2In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to upload an ASP CVE-2023-224518.8Kiwi TCMS is an open source test management system. In version 11.6 and prior, when users register new accounts and/or change passwords, theCVE-2023-224526.5kenny2automate is a Discord bot. In the web interface for server settings, form elements were generated with Discord channel IDs as part of CVE-2023-224535.3Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 3.0.0.beta16 on the `beta` andCVE-2023-224546.1Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 3.0.0.beta16 on the `beta` andCVE-2023-224556.1Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 3.0.0.beta16 on the `beta` andCVE-2023-224566.1ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability that affects versioCVE-2023-224578.8CKEditor Integration UI adds support for editing wiki pages using CKEditor. Prior to versions 1.64.3,t he `CKEditor.HTMLConverter` document CVE-2023-224585.5Redis is an in-memory database that persists on disk. Authenticated users can issue a `HRANDFIELD` or `ZRANDMEMBER` command with specially cCVE-2023-22469.8A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unk
CVE-2023-22448: High severity, CVSS 7.2 | Vulnix