Arbitrary File Deletion Vulnerability in HP Support Assistant
CVE-2022-23456

5.5MEDIUM

Key Information:

Vendor

HP
Status
Support Assistant
Vendor
CVE Published:
28 January 2022

What is CVE-2022-23456?

An arbitrary file deletion vulnerability has been discovered in the HP Support Assistant software. This flaw may allow attackers to remove critical files from the system without proper authorization, leading to possible disruption of services or loss of important data. Users of HP Support Assistant should promptly check for software updates or patches released to mitigate this risk and protect their systems from potential exploitation.

References

https://support.hp.com/us-en/document/ish_5585999-5586023-16
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.