CVE-2023-48654

One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to reset their Active Directory passwords on the login screen of a Windows client. It launches a Chromium based browser in Kiosk mode to provide the reset functionality. The escape sequence is: go to the Google ReCAPTCHA section, click on the Privacy link, observe that there is a new browser window, navigate to any website that offers file upload, navigate to cmd.exe from the file explorer window, and launch cmd.exe as NT AUTHORITY\SYSTEM.

• https://sec-consult.com/vulnerability-lab/advisory/kiosk-escape-privilege-escalation-one-identity-password-manager-secure-password-extension/Third Party Advisory
• https://www.oneidentity.com/products/password-manager/Product
• http://seclists.org/fulldisclosure/2023/Dec/17
• https://sec-consult.com/vulnerability-lab/advisory/kiosk-escape-privilege-escalation-one-identity-password-manager-secure-password-extension/Third Party Advisory
• https://www.oneidentity.com/products/password-manager/Product

Published

Dec 25, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-48649Concrete CMS before 8.5.13 and 9.x before 9.2.2 allows store…5.4
• CVE-2023-4865A vulnerability has been found in SourceCodester Take-Note A…8.8
• CVE-2023-48650Concrete CMS before 8.5.14 and 9 before 9.2.3 is vulnerable …4.8
• CVE-2023-48651Concrete CMS 9 before 9.2.3 is vulnerable to Cross Site Requ…4.3
• CVE-2023-48652Concrete CMS 9 before 9.2.3 is vulnerable to Cross Site Requ…4.3
• CVE-2023-48653Concrete CMS before 8.5.14 and 9 before 9.2.3 allows Cross S…4.3
• CVE-2023-48655An issue was discovered in MISP before 2.4.176. app/Controll…9.8
• CVE-2023-48656An issue was discovered in MISP before 2.4.176. app/Model/Ap…9.8
• CVE-2023-48657An issue was discovered in MISP before 2.4.176. app/Model/Ap…9.8
• CVE-2023-48658An issue was discovered in MISP before 2.4.176. app/Model/Ap…9.8
• CVE-2023-48659An issue was discovered in MISP before 2.4.176. app/Controll…9.8
• CVE-2023-4866A vulnerability was found in SourceCodester Online Tours & T…9.8