What is CVE-2023-36013?

CVE-2023-36013 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. PowerShell Information Disclosure Vulnerability

Which CVE IDs does CVE-2023-36013 cover?

CVE-2023-36013 covers the following CVE IDs: CVE-2023-36013. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2023-36013?

CVE-2023-36013 has a CVSS v3 base score of 6.5, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2023-36013?

CVE-2023-36013 affects 3 products, including: PowerShell 7.2; PowerShell 7.3; PowerShell 7.4.

CVE-2023-36013HighCVSS 6.5

PowerShell Information Disclosure Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

November 17, 2023

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2023-36013 →

📋 Description

What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is data inside the targeted website like IDs, tokens, cryptographic nonces, and other sensitive information.

🎯 Affected products3

PowerShell 7.2
PowerShell 7.3
PowerShell 7.4

✅ Remediation

KBRelease Notes (Security Update) — fixed build 7.2.17 KBRelease Notes (Security Update) — fixed build 7.3.10 KBRelease Notes (Security Update) — fixed build 7.4.0

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36013
patchhttps://github.com/PowerShell/Announcements/issues/55