CVE-2024-47560CWE-863

RevoWorks Cloud Client 3.0.91 and earlier contains an incorrect authorization vulnerability

High · published October 1, 2024

CVSS v3.0
7.8
EPSS
0%
Percentile
6.4
In the wild
Unconfirmed
What it is

RevoWorks Cloud Client 3.0.91 and earlier contains an incorrect authorization vulnerability. If this vulnerability is exploited, unintended processes may be executed in the sandbox environment. Even if malware is executed in the sandbox environment, it does not compromise the client's local environment. However, information in the sandbox environment may be disclosed to outside or behaviors of the sandbox environment may be violated by tampering registry.

The record
Technical detail
CVSS v3.0
7.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00173 · 6.4th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2024-10-01T01:00Z
EPSS history
Timeline
  • 01 OCT 01:00Z
    RevoWorks Cloud Client 3.0.91 and earlier contains an incorrect authorization vulnerability
    cvelistv5