High severity8.8NVD Advisory· Published Nov 22, 2023· Updated Jun 17, 2026

CVE-2023-47250

Description

In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, broken Access Control on X11 server sockets allows authenticated attackers (with access to a VNC session) to access the X11 desktops of other users by specifying their DISPLAY ID. This allows complete control of their desktop, including the ability to inject keystrokes and perform a keylogging attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

m-privacy/Mprivacy Tools
cpe:2.3:a:m-privacy:mprivacy-tools:*:*:*:*:*:*:*:*
Range: <4.0.406g
m-privacy/Rsbac Policy Tgpro
cpe:2.3:a:m-privacy:rsbac-policy-tgpro:*:*:*:*:*:*:*:*
Range: <2.0.159
m-privacy/Tightgatevnc
cpe:2.3:a:m-privacy:tightgatevnc:*:*:*:*:*:*:*:*
Range: <4.1.2-1
m-privacy/TightGate-Pro Serverllm-fuzzy
Range: <2.0.406g

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/175949/m-privacy-TightGate-Pro-Code-Execution-Insecure-Permissions.htmlnvdExploitThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2023/Nov/13nvdExploitMailing ListThird Party Advisory
sec-consult.com/en/vulnerability-lab/advisories/index.htmlnvdThird Party Advisory
sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-m-privacy-tightgate-pro/nvdThird Party Advisory
www.m-privacy.de/en/tightgate-pro-safe-surfing/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000