Incorrect Authorization Vulnerability in RevoWorks Cloud Client Could Allow Unintended Process Execution

CVE-2024-47560

What is CVE-2024-47560?

The RevoWorks Cloud Client prior to version 3.0.91 is susceptible to an incorrect authorization issue that may permit unintended processes to execute within the sandbox environment. While the execution of such processes does not affect the local system environment, it raises significant security concerns regarding potential exposure of sensitive information stored within the sandbox. Additionally, there is a risk that the integrity of the sandbox environment could be compromised through methods such as registry tampering, which further emphasizes the need for immediate attention to this vulnerability.

References