Lucene search

Japan Vulnerability NotesJVN:96828492

HistoryJun 13, 2023 - 12:00 a.m.

JVN#96828492: Chatwork Desktop Application (Mac) vulnerable to code injection

2023-06-1300:00:00

Japan Vulnerability Notes

jvn.jp

chatwork

mac

code injection

vulnerability

cwe-94

update

software

audio

image data

non-administrative user

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

0.0004 Low

EPSS

Percentile

9.2%

JSON

Chatwork Desktop Application (Mac) provided by Chatwork Co., Ltd. contains a code injection vulnerability (CWE-94).

Impact

A non-administrative user of the Mac on which the product is installed may store and obtain audio and image data with no user-consent from the product.

Solution

Update the software
Update the software to the latest version according to the information provided by the developer.

Products Affected

Chatwork Desktop Application (Mac) versions 2.6.43 and earlier

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

0.0004 Low

EPSS

Percentile

9.2%

JSON

Related for JVN:96828492