CVE-2023-6288: Code Injection
Published Dec 6, 2023
·Updated
Code injection in Remote Desktop Manager 2023.3.9.3 and earlier on macOS allows an attacker to execute code via the DYLIBINSERTLIBRARIES environment variable.
Affected Software
2 affected components
All of the following
Devolutions Remote Desktop Manager<2023.3.10.2
macOS
Event History
Dec 6, 2023
CVE Published
01:49 PM
Data Sourced
01:49 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-6288?
CVE-2023-6288 has a high severity rating due to its potential for code execution.
2
How do I fix CVE-2023-6288?
To mitigate CVE-2023-6288, upgrade Remote Desktop Manager to version 2023.3.10.2 or later.
3
Which versions of Remote Desktop Manager are affected by CVE-2023-6288?
CVE-2023-6288 affects Remote Desktop Manager versions 2023.3.9.3 and earlier.
4
What platforms are impacted by CVE-2023-6288?
CVE-2023-6288 impacts the macOS platform specifically.
5
What kind of attack does CVE-2023-6288 allow?
CVE-2023-6288 allows an attacker to execute arbitrary code via manipulation of the DYLIB_INSERT_LIBRARIES environment variable.