CVE-2023-31068

An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\UserDesktop\themes.
Configurations

Configuration 1 (hide)

cpe:2.3:a:tsplus:tsplus_remote_access:*:*:*:*:*:*:*:*

History

21 Nov 2024, 08:01

Type Values Removed Values Added
References () http://packetstormsecurity.com/files/174272/TSPlus-16.0.0.0-Insecure-Permissions.html - Third Party Advisory, VDB Entry () http://packetstormsecurity.com/files/174272/TSPlus-16.0.0.0-Insecure-Permissions.html - Third Party Advisory, VDB Entry
References () https://www.exploit-db.com/exploits/51680 - Third Party Advisory, VDB Entry () https://www.exploit-db.com/exploits/51680 - Third Party Advisory, VDB Entry

13 Sep 2023, 03:54

Type Values Removed Values Added
CPE cpe:2.3:a:tsplus:tsplus_remote_access:*:*:*:*:*:*:*:*
CWE CWE-276
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
References (MISC) http://packetstormsecurity.com/files/174272/TSPlus-16.0.0.0-Insecure-Permissions.html - (MISC) http://packetstormsecurity.com/files/174272/TSPlus-16.0.0.0-Insecure-Permissions.html - Third Party Advisory, VDB Entry
References (MISC) https://www.exploit-db.com/exploits/51680 - (MISC) https://www.exploit-db.com/exploits/51680 - Third Party Advisory, VDB Entry
First Time Tsplus tsplus Remote Access
Tsplus

11 Sep 2023, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-09-11 19:15

Updated : 2024-11-21 08:01


NVD link : CVE-2023-31068

Mitre link : CVE-2023-31068

CVE.ORG link : CVE-2023-31068


JSON object : View

Products Affected

tsplus

  • tsplus_remote_access
CWE
CWE-276

Incorrect Default Permissions