Описание
Stratodesk NoTouch Center before 4.4.68 is affected by: Incorrect Access Control. A low privileged user on the platform, for example a user with "helpdesk" privileges, can perform privileged operations including adding a new administrator to the platform via the easyadmin/user/submitCreateTCUser.do page.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1Версия до 4.4.68 (исключая)
cpe:2.3:a:stratodesk:notouch_center:*:*:*:*:*:*:*:*
EPSS
Процентиль: 52%
0.00295
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-669
Связанные уязвимости
github
больше 3 лет назад
Stratodesk NoTouch Center before 4.4.68 is affected by: Incorrect Access Control. A low privileged user on the platform, for example a user with "helpdesk" privileges, can perform privileged operations including adding a new administrator to the platform via the easyadmin/user/submitCreateTCUser.do page.
EPSS
Процентиль: 52%
0.00295
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-669