CVE-2023-31067: Critical severity tsplus remote access vulnerability
An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\Clients\www.
Credit
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-31067.
What is the title of the vulnerability?
The title of the vulnerability is 'An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\Clients\www.'
What is the severity of CVE-2023-31067?
The severity of CVE-2023-31067 is critical with a CVSS score of 9.8.
What software is affected by CVE-2023-31067?
The affected software is Tsplus Tsplus Remote Access version 16.0.2.14.
How can the vulnerability be exploited?
For information on how to exploit the vulnerability, you can refer to the following references: [Exploit-DB](https://www.exploit-db.com/exploits/51679) and [Packet Storm Security](http://packetstormsecurity.com/files/174275/TSPlus-16.0.2.14-Insecure-Permissions.html).