Vulnerability · Published Oct 1, 2024 · Assigned by jpcert
CVE-2024-47560
High 7.8
In plain English
A high-severity incorrect authorization in RevoWorks Cloud Client from J’s Communication Co., Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).
Official description
RevoWorks Cloud Client 3.0.91 and earlier contains an incorrect authorization vulnerability. If this vulnerability is exploited, unintended processes may be executed in the sandbox environment. Even if malware is executed in the sandbox environment, it does not compromise the client's local environment. However, information in the sandbox environment may be disclosed to outside or behaviors of the sandbox environment may be violated by tampering registry.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| J’s Communication Co., Ltd. | RevoWorks Cloud Client | 3.0.91 and earlier |
Weakness: CWE-863 · Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H