Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: AppsAnywhere Clear all filters
TI-2023-21752 CVE-2023-41137 · GHSA-9r9g-gv68-x7hw

Hard-coded credentials in AppsAnywhere Client

Priority MEDIUM 43

Symmetric encryption used to protect messages between the AppsAnywhere server and client can be broken by reverse engineering the client and used to impersonate the AppsAnywhere server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00341 Published 2023-11-09 Fixed in 1.6.1, 2.0.1 +1 CWE-321
TI-2023-21753 CVE-2023-41138 · GHSA-x43q-54p7-vw63

Improper privilege management in AppsAnywhere Client

Priority LOW 34

The AppsAnywhere macOS client-privileged helper can be tricked into executing arbitrary commands with elevated permissions by a local user process.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.00175 Published 2023-11-09 Fixed in 1.6.1, 2.0.1 +1 CWE-226