CVE-2023-48654

creationtimestamp| type| source ---|---|--- 2023-12-25 07:27:03+00:00| seen| https://t.me/ctinow/159151 2024-01-07 02:06:17+00:00| seen| https://t.me/ctinow/164039...

CVE-2023-48654

One Identity Password Manager before 5.13.1 is affected by a Kiosk Escape privilege escalation. The vulnerability allows an attacker to break out of the kiosk-embedded Chromium browser on the Windows login screen and launch cmd.exe as NT AUTHORITY\SYSTEM, enabling high-privilege access. The escap...