4.4
Medium
CVE-2023-0221 Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with…
Description
Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administrator privileges to bypass the execution controls provided by ACC using the utilman program.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Application and Change Control 8 | 8.x → < 8.3.4 | 8.3.4 |