Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: HYPR Component: Workforce Access Clear all filters
TI-2024-00059 CVE-2024-0068 · GHSA-c48c-24j9-j745

Link following in HYPR Workforce Access

Priority LOW 31

Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00216 Published 2024-02-29 Fixed in 8.7.1 CWE-59
TI-2023-05815 CVE-2023-6336 · GHSA-ghh4-4cxh-fcwj

Link following in HYPR Workforce Access

Priority LOW 33

Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00176 Published 2024-01-16 Fixed in 8.7 CWE-59
TI-2023-05814 CVE-2023-6335 · GHSA-mmp5-hrvp-29pp

Link following in HYPR Workforce Access

Priority LOW 33

Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0018 Published 2024-01-16 Fixed in 8.7 CWE-59
TI-2023-05813 CVE-2023-6334 · GHSA-75hv-cf97-m8r8

Buffer overflow in HYPR Workforce Access

Priority LOW 35

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HYPR Workforce Access on Windows allows Overflow Buffers.This issue affects Workforce Access: before 8.7.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00147 Published 2024-01-16 Fixed in 8.7 CWE-120
TI-2023-04687 CVE-2023-5097 · GHSA-gqr6-mcvx-pvm6

Path traversal in HYPR Workforce Access

Priority LOW 30

Improper Input Validation vulnerability in HYPR Workforce Access on Windows allows Path Traversal.This issue affects Workforce Access: before 8.7.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00187 Published 2024-01-16 Fixed in 8.7 CWE-22
TI-2023-00790 CVE-2023-0834 · GHSA-jg74-q54f-rr76

Incorrect permission assignment in HYPR Workforce Access

Priority MEDIUM 43

Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on MacOS allows Privilege Escalation.This issue affects Workforce Access: from 6.12 before 8.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00368 Published 2023-04-28 Fixed in 8.1 CWE-732
TI-2022-03010 CVE-2022-3258 · GHSA-xvgv-pgqg-27v8

Incorrect permission assignment in HYPR Workforce Access

Priority LOW 38

Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on Windows allows Authentication Abuse.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00272 Published 2022-11-03 Fixed in 7.7.1 CWE-732
TI-2022-01839 CVE-2022-1984 · GHSA-jj9f-2mf3-f7x2

Deserialization of untrusted data in HYPR Windows WFA

Priority LOW 33

This issue affects: HYPR Windows WFA versions prior to 7.2; Unsafe Deserialization vulnerability in HYPR Workforce Access (WFA) before version 7.2 may allow local authenticated attackers to elevate privileges via a malic…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0018 Published 2022-07-19 Fixed in 7.2 CWE-502