CVE-2023-41138

CVSS 7.5v3.1pub. 2023-11-09upd. 2024-11-21

The AppsAnywhere macOS client-privileged helper can be tricked into executing arbitrary commands with elevated permissions by a local user process.

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

🟢

PATCH AVAILABLE

Vendor update available. Deploy in standard maintenance cycle.

CWE

References

Related vulnerabilities

Symmetric encryption used to protect messages between the AppsAnywhere server and client can be broken by reve...