exploitDog

GHSA-79c8-vq74-47fc

Опубликовано: 15 апр. 2024

Источник: github

Github: Не прошло ревью

CVSS3: 7.5

Описание

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS, allowing for an unauthenticated attacker to return the pin value of any user

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS, allowing for an unauthenticated attacker to return the pin value of any user

Ссылки

EPSS

Процентиль: 38%

0.00167

Низкий

7.5 High

CVSS3

CVE ID

Дефекты

CWE-200

Связанные уязвимости

CVE-2024-29840

CVSS3: 7.5

nvd

почти 2 года назад

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS, allowing for an unauthenticated attacker to return the pin value of any user

EPSS

Процентиль: 38%

0.00167

Низкий

7.5 High

CVSS3

CVE ID

Дефекты

CWE-200