CVE-2023-6336: High severity hypr workforce access vulnerability
Published Jan 16, 2024
·Updated
Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.
Affected Software
2 affected components
All of the following
HYPR Workforce Access<8.7
macOS
Event History
Jan 16, 2024
CVE Published
via MITRE·07:42 PM
Data Sourced
via MITRE·07:42 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-6336?
CVE-2023-6336 is considered a moderate severity vulnerability due to its potential for unauthorized file access.
2
How do I fix CVE-2023-6336?
To mitigate CVE-2023-6336, upgrade HYPR Workforce Access to version 8.7 or later.
3
What is the impact of CVE-2023-6336?
CVE-2023-6336 allows an attacker to exploit improper link resolution, potentially leading to arbitrary file access.
4
Which systems are affected by CVE-2023-6336?
CVE-2023-6336 affects HYPR Workforce Access versions prior to 8.7 running on macOS.
5
Is there a workaround for CVE-2023-6336?
There are no documented workarounds for CVE-2023-6336; the recommended action is to update the software.