zhenech on Nostr: Security Advisory YSA-2024-01 - Yubico ...
Security Advisory YSA-2024-01 - Yubico
https://www.yubico.com/support/security-advisories/ysa-2024-01/
"If a user runs the YubiKey Manager GUI as Administrator, browser windows opened by YubiKey Manager GUI may be opened as Administrator which could be exploited by a local attacker to perform actions as Administrator."
Love how this type of exploit is super persistent. I used it 25 years ago to gain extra privileges on school computers. Oh time flies.
https://www.yubico.com/support/security-advisories/ysa-2024-01/
"If a user runs the YubiKey Manager GUI as Administrator, browser windows opened by YubiKey Manager GUI may be opened as Administrator which could be exploited by a local attacker to perform actions as Administrator."
Love how this type of exploit is super persistent. I used it 25 years ago to gain extra privileges on school computers. Oh time flies.