PT-2023-16558 · Hypr · Hypr Workforce Access

Miguel Silva · Publicado 2023-04-28 · Atualizado 2023-05-09 · CVE-2023-0834

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HYPR Workforce Access versions 6.12 through 8.1

Description The issue is related to an Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on MacOS, allowing Privilege Escalation.

Recommendations For versions 6.12 through 8.1, update to version 8.1 or later to resolve the issue. As a temporary workaround, consider restricting access to critical resources to minimize the risk of exploitation.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2023-0834

Produtos afetados

Hypr Workforce Access

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-0834 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-0834 · Aviso do Fabricante
• https://t.me/cvenotify/49325 · Publicação no Telegram
• https://t.me/cibsecurity/63070 · Publicação no Telegram
• https://hypr.com/security-advisories · Aviso do Fabricante