CVE-2023-51749

ScaleFusion 10.5.2 does not properly limit users to the Edge application because a search can be made from a tooltip. NOTE: the vendor's position is "Not vulnerable if the default Windows device profile configuration is used which utilizes modern management with website allow-listing rules."...

CVE-2023-51749

ScaleFusion 10.5.2 does not properly limit users to the Edge application because a search can be made from a tooltip. NOTE: the vendor's position is "Not vulnerable if the default Windows device profile configuration is used which utilizes modern management with website allow-listing rules."...

PT-2023-8689 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: ScaleFusion version 10.5.2 Description: The issue is related to inadequate access control in the Scalefusion MDM Agent, allowing an attacker to open arbitrary websites. Specifically, a search can be made from a tooltip, which can be used to...