CVE-2023-38041 (secure_access_client)

A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use (TOCTOU) race condition. When a particular process flow is initiated, an attacker can exploit this condition to gain unauthorized elevated privileges on the affected system.

abusing attacker check cve elevate exploit flow may permissions privileges process race race condition system toctou