The password reset feature in Courion Access Risk Management Suite Version 8 Update 9 allows remote authenticated users to bypass intended Internet Explorer usage restrictions and execute arbitrary commands by using keyboard shortcuts to navigate the file system and open a command prompt.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Access_risk_management_suite | Courion | 8.0-9 (including) | 8.0-9 (including) |