Approved changes feed: RSS · Atom

cpe:2.3:a:m-privacy:tightgatevnc:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorM Privacy (12ef50fe-0126-56d6-8deb-dec8c09090e7)
ProductTightgatevnc (f10d3c8d-6f2e-5242-a611-e31e72477105)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-47251 vulnerable 2026-06-08 06:14:24.547347 Details available
In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, a Directory Traversal in the print function of the VNC service allows authenticated attackers (with access to a VNC session) to automatically transfer malicious PDF documents by moving them into the .spool directory, and then sending a signal to the VNC service, which automatically transfers them to the connected VNC client's filesystem.
Published: 2023-11-22T00:00:00.000Z
Updated: 2024-08-02T21:09:35.925Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47250 vulnerable 2026-06-08 06:14:24.546637 Details available
In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, broken Access Control on X11 server sockets allows authenticated attackers (with access to a VNC session) to access the X11 desktops of other users by specifying their DISPLAY ID. This allows complete control of their desktop, including the ability to inject keystrokes and perform a keylogging attack.
Published: 2023-11-22T00:00:00.000Z
Updated: 2024-08-02T21:09:35.999Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.