CVE-2023-50159

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Jan 11, 2024
Updated: Jan 18, 2024

Summary

CVE-2023-50159 is a vulnerability affecting ScaleFusion's Windows Desktop App agent version 10.5.2. The issue permits bypassing application restrictions in Kiosk mode, allowing arbitrary code execution. This vulnerability has been resolved in version 10.5.7 by disabling the file explorer in Agent-based Multi-App and Single App Kiosk modes. This bypass could potentially expose the affected system to security risks, making it crucial for users to update to the latest software version.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share