PT-2021-14246 · Revoworks · Revoworks Browser

Published 2021-09-17 · Updated 2022-07-12 · CVE-2021-20791

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions: RevoWorks Browser versions 2.1.230 and earlier

Description: The issue allows an attacker to bypass access restrictions and exchange unauthorized files between the local environment and the isolated environment or settings of the web browser via unspecified vectors. This could potentially lead to unauthorized access or data leakage.

Recommendations: For RevoWorks Browser versions 2.1.230 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-20791

Affected Products

Revoworks Browser

References · 6

• https://jscom.jp/news-20210910_2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20791 · Security Note
• https://osv.dev/vulnerability/CVE-2021-20791 · Vendor Advisory
• https://t.me/cvenotify/21048 · Telegram Post
• https://jvn.jp/en/jp/JVN81658818/index.html · Note
• https://t.me/cvenotify/21652 · Telegram Post