CVE-2023-29066 — Incorrect User Management

CVE-2023-29066

Incorrect User Management PUBLISHED

Description (CNA)

The FACSChorus software does not properly assign data access privileges for operating system user accounts. A non-administrative OS account can modify information stored in the local application data folders.

Affected (CNA)

Vendor / product	Versions
Becton, Dickinson and Company (BD) / FACSChorus	affected 5.0 through 5.1

CWE

CWE-266

References

https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software

ADP enrichment

CVE

No English description supplied.

https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software

CISA-ADP

No English description supplied.

No references supplied.