Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mr84-jvj9-87g5

Опубликовано: 08 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

An Improper Authorization (Access Control Misconfiguration) vulnerability in MGT-COMMERCE GmbH v2.0.0 to v2.4.2 allows attackers to escalate privileges and access sensitive information via manipulation of the Nginx configuration file.

An Improper Authorization (Access Control Misconfiguration) vulnerability in MGT-COMMERCE GmbH v2.0.0 to v2.4.2 allows attackers to escalate privileges and access sensitive information via manipulation of the Nginx configuration file.

EPSS

Процентиль: 83%
0.02021
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 6.5
nvd
около 1 года назад

An Improper Authorization (Access Control Misconfiguration) vulnerability in MGT-COMMERCE GmbH CloudPanel v2.0.0 to v2.4.2 allows low-privilege users to bypass access controls and gain unauthorized access to sensitive configuration files and administrative functionality.

EPSS

Процентиль: 83%
0.02021
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-863