{ "id": "CVE-2024-31498", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-04T23:15:16.743", "lastModified": "2024-04-08T00:15:08.000", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Yubico ykman-gui (aka YubiKey Manager GUI) before 1.2.6 on Windows, when Edge is not used, allows privilege escalation because browser windows can open as Administrator." }, { "lang": "es", "value": "ykman-gui (tambi\u00e9n conocido como GUI de YubiKey Manager) anterior a 1.2.6 en Windows, cuando no se usa Edge, permite la escalada de privilegios porque las ventanas del navegador se pueden abrir como Administrador." } ], "metrics": {}, "references": [ { "url": "https://www.yubico.com/support/security-advisories/ysa-2024-01/", "source": "cve@mitre.org" } ] }