by Kastro
Paper/Archive/CVE-2021-20791

CVE-2021-20791

J’s Communication Co., Ltd. RevoWorks Browser — Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to bypass access restriction and to exc…

EPSS 0.8%CVSS 9.3
critical.is priorityof 100
40
CVSS 9.3 (NVD)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 57.9.579 × 2011.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to bypass access restriction and to exchange unauthorized files between the local environment and the isolated environment or settings of the web browser via unspecified vectors.

Affected

ProductAffectedFixed inSource
RevoWorks Browser2.1.230 and earlier–CNA

Scores by source

NVD9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

References

refjscom.jp/news-20210910_2refjvn.jp/en/jp/JVN81658818/index.html