CVE-2023-3096

MEDIUM

kylin-software-properties < 0.0.1-130 - Improper Access Control in changedSource Function

Title source: llm
STIX 2.1

Description

A vulnerability was found in KylinSoft kylin-software-properties on KylinOS. It has been declared as critical. This vulnerability affects the function changedSource. The manipulation leads to improper access controls. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 0.0.1-130 is able to address this issue. It is recommended to upgrade the affected component. VDB-230686 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

References (3)

Core 3
Core References
Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.230686
Permissions Required, Third Party Advisory signature permissions-required
https://vuldb.com/?ctiid.230686

Scores

CVSS v3 5.3
EPSS 0.0033
EPSS Percentile 25.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-284
Status published
Products (1)
kylinos/kylin-software-properties < 0.0.1-130
Published Jun 05, 2023
Tracked Since Feb 18, 2026