CVE-2023-45849: Arbitrary Code Execution in Helix Core
Published Nov 8, 2023
·Updated
An arbitrary code execution which results in privilege escalation was discovered in Helix Core versions prior to 2023.2. Reported by Jason Geffner.
Affected Software
2 affected components
Perforce Helix Core<2023.2
Perforce Helix Core Server=2023.1/2513900
Event History
Nov 8, 2023
CVE Published
03:40 PM
Data Sourced
03:40 PM
DescriptionSeverityWeakness
Dec 18, 2023
News Published
08:49 PM
Dec 19, 2023
News Published
07:57 PM
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-45849.
2
What is the title of the vulnerability?
The title of the vulnerability is Arbitrary Code Execution in Helix Core.
3
What is the severity of CVE-2023-45849?
The severity of CVE-2023-45849 is critical (9.8 out of 10).
4
What software versions are affected by CVE-2023-45849?
Helix Core versions prior to 2023.2 are affected by CVE-2023-45849.
5
How can I fix CVE-2023-45849?
To fix CVE-2023-45849, update your Helix Core software to version 2023.2.