SALTO ProAccess Space Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in SALTO ProAccess Space software versions prior to 6.13, when the tenancy feature is enabled. This vulnerability allows an authenticated attacker to access spaces outside their assigned partition within the same ProAccess Space installation. Exploitation requires valid operator credentials.

Impact

Exploitation of this vulnerability could allow an authenticated attacker to escalate privileges and access unauthorized spaces within the same ProAccess Space installation.

Remediation

Users of SALTO ProAccess Space should upgrade to version 6.13. After applying the update, it is recommended to operate ProAccess Space on a protected internal network, restrict operator-level accounts to the minimum required, and consider running separate Space instances if strong tenant separation is needed.