CVE-2023-51749

ScaleFusion 10.5.2 is affected by a design/logic flaw where a search can be performed from a tooltip, allowing users to bypass restrictions and access the Edge application. This stems from inadequate access control in the Scalefusion MDM Agent and can enable exploitation locally via the tooltip s...

Scalefusion kiosk security vulnerability

ScaleFusion is a mobile device management and unified endpoint management application from ScaleFusion. A security vulnerability exists in the Scalefusion kiosk version 10.5.2 that stems from the ability to use Ctrl-O and Ctrl-S, resulting in the inability to properly restrict users from using th...

ScaleFusion Security Vulnerabilities

ScaleFusion is a mobile device management and unified endpoint management application from ScaleFusion. A security vulnerability exists in Scalefusion kiosk version 10.5.2 that originates from the ability to bypass Kiosk mode application restrictions to execute arbitrary code...

PT-2023-8682 · Unknown · Scalefusion

Name of the Vulnerable Software and Affected Versions: ScaleFusion versions 10.5.2 through 10.5.6 Description: The issue is related to insufficient access control in the isolated environment of Scalefusion MDM Agent, which can be exploited to impact the confidentiality, integrity, and availabilit...

PT-2023-8690 · Unknown · Scalefusion

Name of the Vulnerable Software and Affected Versions: ScaleFusion versions 10.5.2 through 10.5.6 Description: The issue is related to inadequate access control in the Scalefusion MDM Agent, which can allow an attacker to escape from an isolated software environment. Specifically, in version...