CVE-2023-46759

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Permission control vulnerability in the call module. Successful exploitation of this vulnerability may affect service confidentiality.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Nov 8, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-46766.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yordam MedasPro allows Reflected XSS. CVE-2023-467607.5Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.CVE-2023-467617.5Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.CVE-2023-467627.5Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.CVE-2023-467635.3Vulnerability of background app permission management in the framework module. Successful exploitation of this vulnerability may cause backgCVE-2023-467645.3Unauthorized startup vulnerability of background apps. Successful exploitation of this vulnerability may cause background apps to start maliCVE-2023-467657.5Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC availability.CVE-2023-467667.5Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.CVE-2023-467677.5Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.CVE-2023-467687.5Multi-thread vulnerability in the idmap module. Successful exploitation of this vulnerability may cause features to perform abnormally.CVE-2023-467697.5Use-After-Free (UAF) vulnerability in the dubai module. Successful exploitation of this vulnerability will affect availability.CVE-2023-46779.8Cron log backup files contain administrator session IDs. It is trivial for any attacker who can reach the Pandora FMS Console to scrape the