Lucene search

JpcertCVELIST:CVE-2023-41775

HistorySep 08, 2023 - 7:09 a.m.

CVE-2023-41775

2023-09-0807:09:03

jpcert

www.cve.org

access control

desktop app

macos

local attacker

bypass

camera

microphone

consent

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Improper access control vulnerability in ‘direct’ Desktop App for macOS ver 2.6.0 and earlier allows a local attacker to bypass access restriction and to use camrea, microphone, etc. of the device where the product is installed without the user’s consent.

CNA Affected

[
  {
    "vendor": "L is B Corp.",
    "product": "'direct' Desktop App for macOS",
    "versions": [
      {
        "version": "ver 2.6.0 and earlier",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN42691027/

status.direct4b.com/2023/08/31/2023083101/