PT-2025-16980 · Unknown · Work Desktop For Mac

Published 2025-04-17 · Updated 2025-04-19 · CVE-2025-3651

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions Work Desktop for Mac versions 10.8.1.46 and earlier

Description The issue is related to improper verification of the source of a communication channel, allowing attackers to execute arbitrary commands via unauthorized access to the Agent service. This has been remediated in version 10.8.2.33.

Recommendations For Work Desktop for Mac versions 10.8.1.46 and earlier, update to version 10.8.2.33 to resolve the issue. As a temporary workaround, consider restricting access to the Agent service to minimize the risk of exploitation.

Fix

Origin Validation Error

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-346

CWE-668

Related Identifiers

CVE-2025-3651

Affected Products

Work Desktop For Mac

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-3651 · Security Note
• https://docs.imanage.com/security/CVE-2025-3651.html · Note
• https://twitter.com/CVEnew/status/1913455489746166255 · Twitter Post
• https://twitter.com/CCBalert/status/1913239274838782264 · Twitter Post
• https://twitter.com/CveFindCom/status/1912884295192006757 · Twitter Post
• https://t.me/cvedetector/23234 · Telegram Post