CVE-2023-41137

Summary: CVE-2023-41137 concerns AppsAnywhere. The vulnerability arises from the symmetric encryption protecting messages between the AppsAnywhere server and client, which can be broken by reverse engineering the client, enabling impersonation of the AppsAnywhere server. Affected scope: various A...

CVE-2023-41138

The vulnerability CVE-2023-41138 affects the AppsAnywhere macOS client-privileged helper. A local user process can trick this helper into executing arbitrary commands with elevated permissions, enabling local privilege escalation. Affected product: AppsAnywhere macOS client (privileged helper). R...