CVE-2023-23908

Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access.

• CWE-284

• http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00836.htmlVendor Advisory
• https://lists.debian.org/debian-lts-announce/2023/08/msg00026.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKREYYTWUY7ZDNIB2N6H5BUJ3LE5VZPE/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OL7WI2TJCWSZIQP2RIOLWHOKLM25M44J/Mailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230824-0003/
• https://www.debian.org/security/2023/dsa-5474Third Party Advisory
• http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00836.htmlVendor Advisory
• https://lists.debian.org/debian-lts-announce/2023/08/msg00026.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKREYYTWUY7ZDNIB2N6H5BUJ3LE5VZPE/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OL7WI2TJCWSZIQP2RIOLWHOKLM25M44J/Mailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230824-0003/
• https://www.debian.org/security/2023/dsa-5474Third Party Advisory

Published

Aug 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-23901Improper following of a certificate's chain of trust exists …6.5
• CVE-2023-23902A buffer overflow vulnerability exists in the uhttpd login f…9.8
• CVE-2023-23903An authenticated administrator can upload a SAML configurati…4.9
• CVE-2023-23904NULL pointer dereference in the UEFI firmware for some Intel…6.9
• CVE-2023-23906Missing authentication for critical function exists in SkyBr…7.5
• CVE-2023-23907A directory traversal vulnerability exists in the server.js …7.5
• CVE-2023-23909Out-of-bounds read for some Intel(R) Trace Analyzer and Coll…5.5
• CVE-2023-2391A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 a…4.8
• CVE-2023-23910Out-of-bounds write for some Intel(R) Trace Analyzer and Col…7.8
• CVE-2023-23911An improper access control vulnerability exists prior to v6 …7.5
• CVE-2023-23912A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5…8.8
• CVE-2023-23913There is a potential DOM based cross-site scripting issue in…6.3