CVE-2023-7169

MEDIUM

Snow Inventory Agent < 7.0 - Authentication Bypass via Signature Spoofing

Title source: llm
STIX 2.1

Description

Authentication Bypass by Spoofing vulnerability in Snow Software Snow Inventory Agent on Windows allows Signature Spoof.This issue affects Snow Inventory Agent: through 6.14.5. Customers advised to upgrade to version 7.0

References (1)

Core 1

Scores

CVSS v3 6.0
EPSS 0.0016
EPSS Percentile 5.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-290
Status published
Products (1)
snowsoftware/snow_inventory_agent < 7.0
Published Feb 08, 2024
Tracked Since Feb 18, 2026