medium5.5
CVE-2023-47256
ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of proxy settings
Impact
ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of proxy settings
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Connectwise | Automate | All versions |
| Connectwise | Screenconnect | before 23.8.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://web.archive.org/web/20240208140218/https://gotham-security.com/screenconnect-cve-2023-47256
- https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.8-security-fix
- https://web.archive.org/web/20240208140218/https://gotham-security.com/screenconnect-cve-2023-47256
- https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.8-security-fix