Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2023-32764: Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator.

30
Routine
HIGH 7.8MITIGATEDOWNGRADEDOWNGRADE

CVE-2023-32764 is a high-severity flaw (CVSS 7.8) affecting cloud, cloud enterprise client, folio \/ egov-suite. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator.

Why this priority

  • High severity

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score7.8 (High)
Attack vectorLocal
Attack complexityLow
Privileges neededLow
User interactionNone
EPSS exploit chance0.2% (top 91%)
CISA exploited listNo
Published2023-08-03
Last modified2026-06-17
Publisher (CNA): MITRE · Vendor: fabasoft

Share: LinkedIn · X · Reddit

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

fabasoft cloud MITIGATE
Affected: all versions
Fixed in: no fixed release known
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy cloud || rpm -q cloud || cloud --version
No fixed or unaffected release known
Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.
fabasoft cloud enterprise client DOWNGRADE
Affected: 23.3.0.130
Fixed in: no fixed release known
Safe to downgrade to: a release before 23.3.0.130
1. Check installed version
apt-cache policy cloud-enterprise-client || rpm -q cloud-enterprise-client || cloud-enterprise-client --version
2. No fixed release: DOWNGRADE to a release before 23.3.0.130 (Debian / Ubuntu)
apt-cache madison cloud-enterprise-client sudo apt install cloud-enterprise-client=<VERSION_BEFORE_23.3.0.130> sudo apt-mark hold cloud-enterprise-client
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list cloud-enterprise-client sudo dnf downgrade cloud-enterprise-client-<VERSION_BEFORE_23.3.0.130> sudo dnf versionlock add cloud-enterprise-client
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
fabasoft folio \/ egov-suite DOWNGRADE
Affected: 2021 update_rollup_3 · 2022 · 2022 update_rollup_3 · 2023 · 2023 update_rollup_1
Fixed in: no fixed release known
Safe to downgrade to: a release before 2021
1. Check installed version
apt-cache policy folio--egov-suite || rpm -q folio--egov-suite || folio--egov-suite --version
2. No fixed release: DOWNGRADE to a release before 2021 (Debian / Ubuntu)
apt-cache madison folio--egov-suite sudo apt install folio--egov-suite=<VERSION_BEFORE_2021> sudo apt-mark hold folio--egov-suite
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list folio--egov-suite sudo dnf downgrade folio--egov-suite-<VERSION_BEFORE_2021> sudo dnf versionlock add folio--egov-suite
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2023-32764?

cloud: mitigate or apply the listed mitigation; cloud enterprise client: downgrade or apply the listed mitigation; folio \/ egov-suite: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2023-32764 being exploited?

CVE-2023-32764 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2023-32764 affect?

CVE-2023-32764 affects cloud, cloud enterprise client, folio \/ egov-suite. Severity is high (CVSS 7.8). Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator.

How urgent is CVE-2023-32764?

Priority 30/100. High severity

Related CVEs

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.