Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f2p9-q5wx-c2xv

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authenticated users to perform database operations via a SOAP request, as demonstrated by the initializeQueryDatabase2 request.

The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authenticated users to perform database operations via a SOAP request, as demonstrated by the initializeQueryDatabase2 request.

EPSS

Процентиль: 78%
0.01184
Низкий

Связанные уязвимости

nvd
больше 13 лет назад

The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authenticated users to perform database operations via a SOAP request, as demonstrated by the initializeQueryDatabase2 request.

EPSS

Процентиль: 78%
0.01184
Низкий