Nov 2023: PowerShell Information Disclosure Vulnerability
CVE-2023-36013 Published on November 20, 2023

PowerShell Information Disclosure Vulnerability
PowerShell Information Disclosure Vulnerability

Vendor Advisory NVD

Weakness Type

Use of Hard-coded Credentials

The software contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.


Products Associated with CVE-2023-36013

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2023-36013 are published in Microsoft Powershell:

 

Affected Versions

Microsoft PowerShell 7.2: Microsoft PowerShell 7.3: Microsoft PowerShell 7.4:

Exploit Probability

EPSS
2.49%
Percentile
85.06%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.