Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6p6j-f8q6-5r72

Опубликовано: 09 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 7.1
CVSS3: 6.5

Описание

Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to modify the permissions held by each of the application's users, including the user himself by sending a POST request to /PC/Options.aspx?Command=2&Page=-1.

Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to modify the permissions held by each of the application's users, including the user himself by sending a POST request to /PC/Options.aspx?Command=2&Page=-1.

EPSS

Процентиль: 9%
0.00034
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 6.5
nvd
8 месяцев назад

Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to modify the permissions held by each of the application's users, including the user himself by sending a POST request to /PC/Options.aspx?Command=2&Page=-1.

EPSS

Процентиль: 9%
0.00034
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-863