CVE-2023-47250

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Nov 22, 2023
Updated: Nov 30, 2023
CWE ID 276

Summary

CVE-2023-47250 is a cyber vulnerability that affects m-privacy TightGate-Pro Server in mprivacy-tools before version 2.0.406g. The vulnerability is related to broken access control on X11 server sockets, which allows authenticated attackers with access to a VNC session to access the X11 desktops of other users by specifying their DISPLAY ID. This enables the attacker to gain complete control over the victim's desktop, including injecting keystrokes and performing keylogging attacks. The vulnerability has a risk score of 65 and has been rated as high severity by NVD@NIST.gov. The exploitability score is 2.8, and the base score is 8.8 according to CVSS:3.1 metrics. Remediation for this vulnerability is not provided in the source text, but it would likely involve updating to a patched version of mprivacy-tools to mitigate the risk.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-47250 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options