Threats tagged 'ghsa-g2cq-q859-8fm9'

A vulnerability in AnyDesk through version 9.0.4 allows a remotely connected user with 'Control my device' permission to manipulate remote settings and set a password for the Full Access profile without the counterparty's confirmation. This enables the attacker to later connect without requiring approval from the device owner.