2 lines
3.1 KiB
JSON
2 lines
3.1 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["MacOS"],"product":"Work Desktop for Mac","vendor":"iManage","versions":[{"lessThan":"10.8.2.33","status":"affected","version":"0","versionType":"custom"}]}],"source":"5d978718-751a-428d-ac8e-4f9445ebfd11"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper Verification of Source of a Communication Channel in Work Desktop for Mac versions 10.8.1.46 and earlier\n\n allows attackers to execute arbitrary commands via unauthorized access to the Agent service. \n\nThis has been remediated in Work Desktop for Mac version 10.8.2.33."},{"lang":"es","value":"La verificación incorrecta del origen de un canal de comunicación en Work Desktop para Mac, versión 10.8.1.46 y anteriores, permite a los atacantes ejecutar comandos arbitrarios mediante acceso no autorizado al servicio del Agente. Este problema se ha solucionado en Work Desktop para Mac, versión 10.8.2.33."}],"id":"CVE-2025-3651","lastModified":"2026-06-17T09:20:23.733","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"5d978718-751a-428d-ac8e-4f9445ebfd11","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-3651","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-04-17T18:53:38.640700Z","version":"2.0.3"}}]},"published":"2025-04-17T15:15:58.620","references":[{"source":"5d978718-751a-428d-ac8e-4f9445ebfd11","url":"https://docs.imanage.com/security/CVE-2025-3651.html"}],"sourceIdentifier":"5d978718-751a-428d-ac8e-4f9445ebfd11","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-346"},{"lang":"en","value":"CWE-668"}],"source":"5d978718-751a-428d-ac8e-4f9445ebfd11","type":"Secondary"}]}
|