CVE-2023-47250

CVE-2023-47250 affects mprivacy-tools prior to 2.0.406g (m-privacy TightGate-Pro Server). The root cause is broken access control on X11 server sockets, enabling an authenticated attacker with access to a VNC session to specify another user’s DISPLAY ID and access that user’s X11 desktop. This gr...

CVE-2023-47251

CVE-2023-47251 affects mprivacy-tools before 2.0.406g (TightGate-Pro Server). A Directory Traversal in the VNC print function allows authenticated users with a VNC session to place malicious PDFs into the .spool directory and trigger the VNC service to transfer them to the connected VNC client’s ...