CVE-2024-47560 | BDVDB-2026-249781 Detail
J’s CommunicationRevoWorks Cloud Client
Description#
RevoWorks Cloud Client 3.0.91 and earlier contains an incorrect authorization vulnerability. If this vulnerability is exploited, unintended processes may be executed in the sandbox environment. Even if malware is executed in the sandbox environment, it does not compromise the client's local environment. However, information in the sandbox environment may be disclosed to outside or behaviors of the sandbox environment may be violated by tampering registry.
Impact#
Per CVSS v3.0: confidentiality impact high, integrity impact high, availability impact high. Attack vector: local.
Weaknesses#
- CWE-863 Incorrect Authorization
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.