CVE-2023-47250

creationtimestamp| type| source ---|---|--- 2023-12-31 18:18:46+00:00| seen| MISP/0bd7388a-e1df-4806-aa82-02ce3b1ac553...

m-privacy TightGate-Pro Code Execution / Insecure Permissions

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: m-privacy TightGate-Pro vulnerable version: Rolling Release, servers with the following package versions are vulnerable: tightgatevnc...

CVE-2023-47250

CVE-2023-47250 affects mprivacy-tools prior to 2.0.406g (m-privacy TightGate-Pro Server). The root cause is broken access control on X11 server sockets, enabling an authenticated attacker with access to a VNC session to specify another user’s DISPLAY ID and access that user’s X11 desktop. This gr...