Описание
An issue was discovered in Delta RM 1.2. Using the /risque/risque/ajax-details endpoint, with a POST request indicating the risk to access with the id parameter, it is possible for users to access risks of other companies.
Ссылки
- ExploitThird Party Advisory
- ProductVendor Advisory
- ExploitThird Party Advisory
- ProductVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:deltarm:delta_rm:1.2:*:*:*:*:*:*:*
EPSS
Процентиль: 45%
0.00225
Низкий
4.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
CVSS3: 4.3
github
около 4 лет назад
An issue was discovered in Delta RM 1.2. Using the /risque/risque/ajax-details endpoint, with a POST request indicating the risk to access with the id parameter, it is possible for users to access risks of other companies.
EPSS
Процентиль: 45%
0.00225
Низкий
4.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
NVD-CWE-Other