Description
One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an unspecified method. CWE-250: Execution with Unnecessary Privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| One | One | version 5.9.7.1 – ≤ upgrade to versions 5.12.2, 5.11.2 or 5.13 | — |