CVE-2024-37742

2024-06-2500:00:00

mitre

github.com

vulnerability

seb

windows

clipboard

exam integrity

exploit

exam controls

AI Score

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Insecure Access Control in Safe Exam Browser (SEB) = 3.5.0 on Windows. The vulnerability allows an attacker to share clipboard data between the SEB kiosk mode and the underlying system, compromising exam integrity. By exploiting this flaw, an attacker can bypass exam controls and gain an unfair advantage during exams.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:ethz:safe_exam_browser:*:*:*:*:*:windows:*:*"
    ],
    "vendor": "ethz",
    "product": "safe_exam_browser",
    "versions": [
      {
        "status": "affected",
        "version": "3.5.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]