Software Vulnerability Allows for Unauthorized Access to Other Applications

CVE-2024-3460

Summary

In KioWare for Windows, versions up to and including 8.34, a session management flaw exists that allows users to exit the application and access other pre-opened applications during a brief time window prior to an enforced automatic logout. This exploitation requires that external applications remain active when KioWare is launched, and the attacker must possess knowledge of the specific PIN associated with that KioWare instance. By executing a designated task that delays the application, the attacker can extend the period in which unauthorized program launch can occur, potentially compromising sensitive data.

References