CVE-2023-36013: PowerShell Information Disclosure Vulnerability

Overview

Severity
Medium (CVSS 6.5)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Category
Information Disclosure
Exploit Status
Not Exploited
Exploitation Likelihood
Less Likely
Patch Tuesday
2023-Nov
Released
2023-11-17
EPSS Score
2.49% (percentile: 85.3%)

FAQ

What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is data inside the targeted website like IDs, tokens, cryptographic nonces, and other sensitive information.

Affected Products (3)

Developer Tools

  • PowerShell 7.2
  • PowerShell 7.3
  • PowerShell 7.4

Security Updates (1)

Acknowledgments

<a href="https://www.linkedin.com/in/alex-anders-3b351047/">Alex Anders</a> with <a href="https://www.microsoft.com/">Microsoft</a>, <a href="https://www.linkedin.com/in/alex-anders-3b351047/">Alex Anders</a> with <a href="https://www.microsoft.com/">Microsoft</a>

Revision History

  • 2023-11-17: Information published.