CVE-2023-45849: Arbitrary Code Execution in Helix Core
First published: Wed Nov 08 2023(Updated: )
An arbitrary code execution which results in privilege escalation was discovered in Helix Core versions prior to 2023.2. Reported by Jason Geffner.
Credit: security@puppet.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Perforce Helix Core | <2023.2 | |
| Perforce Helix Core Server | =2023.1/2513900 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Peer vulnerabilities
(Found alongside the following vulnerabilities)
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-45849.
What is the title of the vulnerability?
The title of the vulnerability is Arbitrary Code Execution in Helix Core.
What is the severity of CVE-2023-45849?
The severity of CVE-2023-45849 is critical (9.8 out of 10).
What software versions are affected by CVE-2023-45849?
Helix Core versions prior to 2023.2 are affected by CVE-2023-45849.
How can I fix CVE-2023-45849?
To fix CVE-2023-45849, update your Helix Core software to version 2023.2.
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- agent/weakness
- collector/mitre-cve
- collector/nvd-api
- collector/the-register
- source/The Register
- alias/CVE-2023-5759
- alias/CVE-2023-35767
- alias/CVE-2023-45319
- vendor/perforce
- canonical/perforce helix core server
- version/perforce helix core server/2023.1/2513900
- canonical/perforce helix core