Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qp52-95j5-r3g3

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The access controls on the Mobility read-only API improperly validate user access permissions. Attackers with both network access to the API and valid credentials can read data from it; regardless of access control group membership settings. This vulnerability is fixed in Mobility v11.76 and Mobility v12.14.

The access controls on the Mobility read-only API improperly validate user access permissions. Attackers with both network access to the API and valid credentials can read data from it; regardless of access control group membership settings. This vulnerability is fixed in Mobility v11.76 and Mobility v12.14.

EPSS

Процентиль: 37%
0.00162
Низкий

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 5.3
nvd
больше 4 лет назад

The access controls on the Mobility read-only API improperly validate user access permissions. Attackers with both network access to the API and valid credentials can read data from it; regardless of access control group membership settings. This vulnerability is fixed in Mobility v11.76 and Mobility v12.14.

EPSS

Процентиль: 37%
0.00162
Низкий

Дефекты

CWE-732