CVE-2023-31068

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Sep 11, 2023
Updated: Sep 13, 2023
CWE ID 276

Summary

CVE-2023-31068 is a vulnerability affecting TSplus Remote Access versions up to 16.0.2.14. This issue grants Full Control permissions to the Everyone group on certain directories within the %PROGRAMFILES(X86)%\TSplus\UserDesktop\themes path, potentially allowing unauthorized users to modify or access sensitive files. Exploitation of this vulnerability could lead to data theft or system compromise. System administrators are urged to update their TSplus installations to a patched version as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • TSplus Remote Access

Affected Vendors

  • TSPlus

Advisories, Assessments, and Mitigations