PT-2024-32660 · Revoworks · Revoworks Cloud Client

Published 2024-09-30 · Updated 2024-10-04 · CVE-2024-47560

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RevoWorks Cloud Client versions 3.0.91 and earlier

Description The issue is related to an incorrect authorization vulnerability. If exploited, it may allow unintended processes to be executed in the sandbox environment. Although the local environment of the client remains uncompromised even if malware is executed in the sandbox, there is a risk of information disclosure within the sandbox environment or violation of its behavior through registry tampering.

Recommendations For RevoWorks Cloud Client versions 3.0.91 and earlier, update to a version later than 3.0.91 to resolve the incorrect authorization vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2024-47560

Affected Products

Revoworks Cloud Client

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-47560 · Security Note
• https://twitter.com/VulmonFeeds/status/1840993194554564837 · Twitter Post
• https://t.me/cvedetector/6693 · Telegram Post
• https://twitter.com/CVEnew/status/1840923644542771705 · Twitter Post
• https://jscom.jp/news-20240918 · Note
• https://jvn.jp/en/jp/JVN39280069 · Note