28 lines
918 B
JSON
Raw Normal View History

2023-04-24 12:24:31 +02:00
{
"id": "CVE-2023-27830",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-04-12T15:15:12.830",
"lastModified": "2023-04-12T16:19:24.713",
"vulnStatus": "Undergoing Analysis",
"descriptions": [
{
"lang": "en",
"value": "TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a file transfer. This is due to the fact that TightVNC runs in the backend as a high-privileges account."
}
],
"metrics": {},
"references": [
{
"url": "https://medium.com/nestedif/vulnerability-disclosure-privilege-escalation-tightvnc-8165208cce",
"source": "cve@mitre.org"
},
{
"url": "https://www.tightvnc.com/news.php",
"source": "cve@mitre.org"
},
{
"url": "https://www.tightvnc.com/whatsnew.php",
"source": "cve@mitre.org"
}
]
}