2 lines
5.1 KiB
JSON
2 lines
5.1 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["HIPS"],"product":"ESET NOD32 Antivirus","vendor":"ESET, spol. s r.o.","versions":[{"status":"unaffected","version":"1463"}]},{"defaultStatus":"unaffected","modules":["HIPS"],"product":"ESET Internet Security","vendor":"ESET, spol. s r.o.","versions":[{"status":"unaffected","version":"1463"}]},{"defaultStatus":"unaffected","modules":["HIPS"],"product":"ESET Smart Security Premium","vendor":"ESET, spol. s r.o.","versions":[{"status":"unaffected","version":"1463"}]},{"defaultStatus":"unaffected","modules":["HIPS"],"product":"ESET Endpoint Antivirus","vendor":"ESET, spol. s r.o.","versions":[{"status":"unaffected","version":"1463"}]},{"defaultStatus":"unaffected","modules":["HIPS"],"product":"ESET Endpoint Security","vendor":"ESET, spol. s r.o.","versions":[{"status":"unaffected","version":"1463"}]},{"defaultStatus":"unaffected","modules":["HIPS"],"product":"ESET Server Security for Windows Server (File Security)","vendor":"ESET, spol. s r.o.","versions":[{"status":"unaffected","version":"1463"}]},{"defaultStatus":"unaffected","modules":["HIPS"],"product":"ESET Mail Security for Microsoft Exchange Server","vendor":"ESET, spol. s r.o.","versions":[{"status":"unaffected","version":"1463"}]},{"defaultStatus":"unaffected","modules":["HIPS"],"product":"ESET Mail Security for IBM Domino","vendor":"ESET, spol. s r.o.","versions":[{"status":"unaffected","version":"1463"}]},{"defaultStatus":"unaffected","modules":["HIPS"],"product":"ESET Security for Microsoft SharePoint Server","vendor":"ESET, spol. s r.o.","versions":[{"status":"unaffected","version":"1463"}]}],"source":"security@eset.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:eset:endpoint_antivirus:-:*:*:*:*:-:*:*","matchCriteriaId":"2B76C798-A8F7-4705-B85A-98CE4C44AC53","vulnerable":true},{"criteria":"cpe:2.3:a:eset:endpoint_security:-:*:*:*:*:*:*:*","matchCriteriaId":"81593DEE-54D7-49D5-9AE6-20B7E2B0AF8F","vulnerable":true},{"criteria":"cpe:2.3:a:eset:internet_security:-:*:*:*:*:*:*:*","matchCriteriaId":"F2CAD248-1F32-4459-A530-8706E334C67F","vulnerable":true},{"criteria":"cpe:2.3:a:eset:mail_security:-:*:*:*:*:domino:*:*","matchCriteriaId":"5043B5B1-38B2-4621-B738-A79E5DF8D98E","vulnerable":true},{"criteria":"cpe:2.3:a:eset:mail_security:-:*:*:*:*:exchange_server:*:*","matchCriteriaId":"DE40A56E-EBC0-43C8-85FB-868802B4817F","vulnerable":true},{"criteria":"cpe:2.3:a:eset:nod32:-:*:*:*:*:*:*:*","matchCriteriaId":"82540E3B-B426-424F-A6FD-C0AAB596389A","vulnerable":true},{"criteria":"cpe:2.3:a:eset:security:-:*:*:*:*:sharepoint_server:*:*","matchCriteriaId":"D6CCDFB5-D27D-40F5-9BFC-274DA84783E8","vulnerable":true},{"criteria":"cpe:2.3:a:eset:server_security:-:*:*:*:*:windows_server:*:*","matchCriteriaId":"74BC745B-A4C5-4EAE-B985-78FDA3C40516","vulnerable":true},{"criteria":"cpe:2.3:a:eset:smart_security:-:*:*:*:premium:*:*:*","matchCriteriaId":"375F46B4-9FDF-48FB-935A-8BB6FEF5221A","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"\nThe vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions."},{"lang":"es","value":"La vulnerabilidad potencialmente permite a un atacante hacer un uso indebido de las operaciones de archivos de ESET durante la actualización del módulo para eliminar o mover archivos sin tener los permisos adecuados."}],"id":"CVE-2023-3160","lastModified":"2026-11-10T12:10:00.177","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"security@eset.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-3160","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-10-09T20:03:59.300075Z","version":"2.0.3"}}]},"published":"2023-08-14T10:15:09.503","references":[{"source":"security@eset.com","tags":["Vendor Advisory"],"url":"https://support.eset.com/en/ca8466"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.eset.com/en/ca8466"}],"sourceIdentifier":"security@eset.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-269"}],"source":"security@eset.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-269"}],"source":"nvd@nist.gov","type":"Primary"}]}
|