CVE-2023-5993

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Feb 27, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-59957.5An issue has been discovered in GitLab EE affecting all versions starting from 16.2 before 16.4.3, all versions starting from 16.5 before 16CVE-2023-59968.8Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit heap corruption via a cCVE-2023-59978.8Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruptiCVE-2023-59987.5Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3.0-DEV.CVE-2023-60006.1The Popup Builder WordPress plugin before 4.2.3 does not prevent simple visitors from updating existing popups, and injecting raw JavaScriptCVE-2023-60017.5Prometheus metrics are available without authentication. These expose detailed and sensitive information about the YugabyteDB Anywhere envirCVE-2023-60026.1YugabyteDB is vulnerable to cross site scripting (XSS) via log injection. Writing invalidated user input to log files can allow an unprivileCVE-2023-60044.8A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. TCVE-2023-60054.8The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 does not sanitize and escape some of its settings, which coCVE-2023-60066.7This vulnerability potentially allows local attackers to escalate privileges on affected installations of PaperCut NG. An attacker must haveCVE-2023-60076.5The UserPro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capabilitCVE-2023-60084.3The UserPro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.1.1. This is due to missing
CVE-2023-5993: High severity, CVSS 7.8 | Vulnix