CVE-2023-4003

HIGH

One Identity Password Manager <5.9.7.1 - Privilege Escalation

Title source: llm

Description

One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an unspecified method. CWE-250: Execution with Unnecessary Privileges.

References (1)

[Third Party Advisory] https://www.gov.il/en/Departments/faq/cve_advisories

Scores

CVSS v3 7.6

EPSS 0.0010

EPSS Percentile 27.5%

Attack Vector PHYSICAL

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-250

Status published

Products (1)

oneidentity/password_manager 5.9.7.1 - 5.11.2

Published Sep 27, 2023

Tracked Since Feb 18, 2026