Lucene search

HYPRCVELIST:CVE-2024-0068

HistoryFeb 29, 2024 - 7:51 p.m.

CVE-2024-0068

2024-02-2919:51:38

CWE-59

HYPR

www.cve.org

link following

file manipulation

workforce access

macos

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L

0.0004 Low

EPSS

Percentile

9.1%

JSON

Improper Link Resolution Before File Access (‘Link Following’) vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "MacOS"
    ],
    "product": "Workforce Access",
    "vendor": "HYPR",
    "versions": [
      {
        "lessThan": "8.7.1",
        "status": "affected",
        "version": "0",
        "versionType": "patch"
      }
    ]
  }
]

References

www.hypr.com/trust-center/security-advisories

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVELIST:CVE-2024-0068