CVE-2023-41137

CVSS 8 HIGHEPSS 0.3%CWE-321 CWE-798

Symmetric encryption used to protect messages between the AppsAnywhere server and client can be broken by reverse engineering the client and used to impersonate the AppsAnywhere server.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Produtos afetados

AppsAnywhere · AppsAnywhere Client

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://docs.appsanywhere.com/appsanywhere/3.1/2023-11-security-advisory