CVE-2023-0221

Summary

Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administrator privileges to bypass the execution controls provided by ACC using the utilman program.

Affected Software

VendorProductVersion RangeStatus
TrellixApplication and Change Control8.x < 8.3.4affected

Weaknesses

  • CWE-269: CWE-269 – Improper Privilege Management

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References