CVE-2023-0882

high

Description

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Kron Tech Single Connect on Windows allows Privilege Abuse. This issue affects Single Connect: 2.16.

References

https://www.usom.gov.tr/bildirim/tr-23-0092

https://docs.krontech.com/singleconnect-2-16/update-patch-rdp-proxy-idor-vulnerability

Details

Source: Mitre, NVD

Published: 2023-02-17

Updated: 2023-09-03

Risk Information

CVSS v2

Base Score: 9

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H