CVE-2023-0882 - Authorization Bypass Through User-Controlled Key on Single Connect

Back Back to CVE browser

HIGH

Authorization Bypass Through User-Controlled Key on Single Connect

Published Feb 17, 2023

8.8

HIGH

CVSS 3.1

EPSS 0.72%

Description

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Kron Tech Single Connect on Windows allows Privilege Abuse. This issue affects Single Connect: 2.16.

Affected products

Vendor Kron Tech Product Single Connect Default
unaffected
- Version
  2.16
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Kron Tech

Single Connect

unaffected

Version	Status	Constraints
2.16	affected	-

Remediation

Vendor solution

Apply the patch on https://filerepo.krontech.com/index.php/s/VQRlYxpzsECp3UU https://filerepo.krontech.com/index.php/s/VQRlYxpzsECp3UU

(md5sum: 6fea2b58915854b663f43fdf4516522a, instructions on https://docs.krontech.com/singleconnect-2-16/update-patch-rdp-proxy-idor-vulnerability https://docs.krontech.com/singleconnect-2-16/update-patch-rdp-proxy-idor-vulnerability ) https://docs.krontech.com/singleconnect-2-16/update-patch-rdp-proxy-idor-vulnerability

) and update the Single Connect (PAM) to version 2.16.1.

Weaknesses (1)

CWE-639

Authorization Bypass

References (4)

https://docs.krontech.com/singleconnect-2-16/update-patch-rdp-proxy-idor-vulnerability
PatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-12871
Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0092
government-resource
https://www.usom.gov.tr/bildirim/tr-23-0092
government-resourcebroken-linkBroken Link

Link	Providers	Tags
https://docs.krontech.com/singleconnect-2-16/update-patch-rdp-proxy-idor-vulnerability		PatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-12871		Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0092		government-resource
https://www.usom.gov.tr/bildirim/tr-23-0092		government-resourcebroken-linkBroken Link