Vulnerability Description
In ScaleFusion (Windows Desktop App) agent 10.5.2, Kiosk mode application restrictions can be bypassed allowing arbitrary code to be executed. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Scalefusion | Scalefusion | 10.5.2 |
Related Weaknesses (CWE)
References
- https://help.scalefusion.com/docs/security-advisory-for-windows-mdm-agent
- https://medium.com/nestedif/vulnerability-disclosure-browser-mode-kiosk-bypass-sExploitThird Party Advisory
- https://medium.com/nestedif/vulnerability-disclosure-kiosk-mode-bypass-scalefusiExploitThird Party Advisory
- https://help.scalefusion.com/docs/security-advisory-for-windows-mdm-agent
- https://medium.com/nestedif/vulnerability-disclosure-browser-mode-kiosk-bypass-sExploitThird Party Advisory
- https://medium.com/nestedif/vulnerability-disclosure-kiosk-mode-bypass-scalefusiExploitThird Party Advisory
FAQ
What is CVE-2023-50159?
CVE-2023-50159 is a vulnerability with a CVSS score of 8.8 (HIGH). In ScaleFusion (Windows Desktop App) agent 10.5.2, Kiosk mode application restrictions can be bypassed allowing arbitrary code to be executed. This is fixed in 10.5.7 by preventing the launching of th...
How severe is CVE-2023-50159?
CVE-2023-50159 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-50159?
Check the references section above for vendor advisories and patch information. Affected products include: Scalefusion Scalefusion.