[FullDisclosure] SEC Consult SA-20231206 :: Kiosk Escape Privilege Escalation in One Identity Password Manager Secure Password Extension

[hinoshiba]

Posted by SEC Consult Vulnerability Lab, Research via Fulldisclosure on Dec 12

SEC Consult Vulnerability Lab Security Advisory < 20231206-0 >

=======================================================================

title: Kiosk Escape Privilege Escalation

product: One Identity Password Manager Secure Password Extension

vulnerable version: <5.13.1

fixed version: 5.13.1

CVE number: CVE-2023-48654

impact: critical

homepage:...

https://seclists.org/fulldisclosure/2023/Dec/17