CyberRota Analysis
AI-GeneratedA vulnerability in TFA allows for potential information disclosure due to a missing permission check, which can be exploited by an attacker with System privileges to access sensitive local information without requiring user interaction. Organizations utilizing TFA should prioritize addressing this issue to mitigate the risk of unauthorized data exposure. A patch is available under ID ALPS11053160.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11053160; Issue ID: MSV-8004.
Related CVEs
Other vulnerabilities affecting the same vendor(s)