Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m83v-2qcx-3x2w

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request.

Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request.

EPSS

Процентиль: 84%
0.02128
Низкий

Связанные уязвимости

CVSS3: 7.2
nvd
больше 6 лет назад

Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request.

EPSS

Процентиль: 84%
0.02128
Низкий