CVE-2023-45160

In the affected version of the 1E Client, an ordinary user could subvert downloaded instruction resource files, e.g., to substitute a harmful script. by replacing a resource script file created by an instruction at run time with a malicious script. The 1E Client's temporary directory is now locked down in the released patch. Resolution: This has been fixed in patch Q23094  This issue has also been fixed in the Mac Client in updated versions of Non-Windows release v8.1.2.62 - please re-download from the 1E Support site. Customers with Mac Client versions higher than v8.1 will need to upgrade to v23.11 to remediate this vulnerability.

• CWE-552
• CWE-552

• https://www.teamviewer.com/en/resources/trust-center/security-bulletins/1e-2023-2002/
• https://1e.my.site.com/s/
• https://www.1e.com/trust-security-compliance/cve-info/Vendor Advisory
• https://www.1e.com/vulnerability-disclosure-policy/

Published

Oct 5, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-45150Nextcloud calendar is a calendar app for the Nextcloud serve…4.3
• CVE-2023-45151Nextcloud server is an open source home cloud platform. Affe…8.8
• CVE-2023-45152Engelsystem is a shift planning system for chaos events. A B…2.3
• CVE-2023-45158An OS command injection vulnerability exists in web2py 2.24.…9.8
• CVE-2023-451591E Client installer can perform arbitrary file deletion on p…8.4
• CVE-2023-4516 A CWE-306: Missing Authentication for Critical Function vul…7.8
• CVE-2023-45161The 1E-Exchange-URLResponseTime instruction that is part of …7.2
• CVE-2023-45162Affected 1E Platform versions have a Blind SQL Injection vul…9.8
• CVE-2023-45163The 1E-Exchange-CommandLinePing instruction that is part of …7.2
• CVE-2023-45165IBM AIX 7.2 and 7.3 could allow a non-privileged local user …5.5
• CVE-2023-45166IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged …7.8
• CVE-2023-45167IBM AIX's 7.3 Python implementation could allow a non-privil…5.5