PT-2024-13062 · Claris International · Filemaker Pro.App+1

Published 2024-03-19 · Updated 2024-12-09 · CVE-2023-42920

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FileMaker Pro.app versions (affected versions not specified) Claris Pro.app versions (affected versions not specified)

Description A dylib hijacking issue has been fixed by Claris International in FileMaker Pro.app and Claris Pro.app on macOS.

Recommendations For FileMaker Pro.app, update to the latest version to resolve the issue. For Claris Pro.app, update to the latest version to resolve the issue.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2023-42920

Affected Products

Claris Pro.App

Filemaker Pro.App

References · 6

• https://support.claris.com/s/article/FileMaker-Security-Information?language=en_US · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-42920 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-42920 · Security Note
• https://twitter.com/CVEnew/status/1770136755062153697 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1770158547877101665 · Twitter Post
• https://t.me/cvenotify/103549 · Telegram Post