CVE-2023-6335

Summary

CVE-2023-6335 is a new vulnerability affecting HYPR Workforce Access on Windows. This issue, known as an Improper Link Resolution Before File Access or "Link Following" vulnerability, allows user-controlled filenames. An attacker can exploit this flaw to gain unauthorized access to sensitive files or execute malicious code, making it a significant security risk. The vulnerability exists in versions of Workforce Access prior to 8.7, and users are advised to update their software as soon as possible to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.