Insecure Permissions in Fit2Cloud Cloud Explorer Lite by Fit2Cloud
CVE-2023-50612

7.8HIGH

Key Information:

Vendor

Fit2Cloud

Status
Cloudexplorer Lite
Vendor
CVE Published:
6 January 2024

What is CVE-2023-50612?

An insecure permissions vulnerability has been identified in Fit2Cloud's Cloud Explorer Lite version 1.4.1, enabling local attackers to escalate privileges. By manipulating the cloud accounts parameter, attackers can gain unauthorized access to sensitive information. This security flaw poses substantial risks to users who rely on this cloud management tool, emphasizing the necessity for prompt updates and security assessments.

References

https://github.com/yaowenxiao721/CloudExplorer-Lite-v1.4....

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.