Описание
In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/sso/config/ SSO configuration endpoint allows any logged-in user (guest, standard, or admin) to view and modify information.
Ссылки
- Vendor Advisory
- Third Party Advisory
- Third Party Advisory
- Vendor Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:eigentech:natural_language_processing:3.10.1:*:*:*:*:*:*:*
EPSS
Процентиль: 56%
0.00336
Низкий
6.3 Medium
CVSS3
8.1 High
CVSS3
5.5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
CVSS3: 8.1
github
больше 3 лет назад
In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/sso/config/ SSO configuration endpoint allows any logged-in user (guest, standard, or admin) to view and modify information.
EPSS
Процентиль: 56%
0.00336
Низкий
6.3 Medium
CVSS3
8.1 High
CVSS3
5.5 Medium
CVSS2
Дефекты
NVD-CWE-Other