Read the docs

AppsAnywhere

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

AppsAnywhere records in CISA KEV

No AppsAnywhere vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Appsanywhere Client 2 records MEDIUM

Records

2 records in Appsanywhere Client · all components

TI-2023-21752 CVE-2023-41137 · GHSA-9r9g-gv68-x7hw

Hard-coded credentials in AppsAnywhere Client

Priority MEDIUM 43

Symmetric encryption used to protect messages between the AppsAnywhere server and client can be broken by reverse engineering the client and used to impersonate the AppsAnywhere server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00341 Published 2023-11-09 Fixed in 1.6.1, 2.0.1 +1 CWE-321
TI-2023-21753 CVE-2023-41138 · GHSA-x43q-54p7-vw63

Improper privilege management in AppsAnywhere Client

Priority LOW 34

The AppsAnywhere macOS client-privileged helper can be tricked into executing arbitrary commands with elevated permissions by a local user process.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.00175 Published 2023-11-09 Fixed in 1.6.1, 2.0.1 +1 CWE-226
Open these records in search →