Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w94q-728v-qj2f

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden function, as demonstrated by the password-change function.

The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden function, as demonstrated by the password-change function.

EPSS

Процентиль: 78%
0.01184
Низкий

Связанные уязвимости

nvd
больше 13 лет назад

The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden function, as demonstrated by the password-change function.

EPSS

Процентиль: 78%
0.01184
Низкий