What is CVE-2023-50159?

CVE-2023-50159 is a high-severity vulnerability in Scalefusion, classified under Improper Access Control. CVSS score: 8.8/10. Published 2024-01-11.

How severe is CVE-2023-50159?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Scalefusion

CVE-2023-50159

In ScaleFusion (Windows Desktop App) agent 10.5.2, Kiosk mode application restrictions can be bypassed allowing arbitrary code to be executed. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-Ap…

EPSS: 0.003 (20.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

Scalefusion — versions 10.5.2
N/a — versions n/a

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

cve@mitre.org (Exploit, Third Party Advisory)
cve@mitre.org (Exploit, Third Party Advisory)
cve@mitre.org

Frequently asked questions

What is CVE-2023-50159?: CVE-2023-50159 is a high-severity vulnerability in Scalefusion, classified under Improper Access Control. CVSS score: 8.8/10. Published 2024-01-11.
How severe is CVE-2023-50159?: High severity. CVSS v3 base score is 8.8 out of 10.