Описание
A user is capable of assigning him/herself to arbitrary groups by reusing a POST request issued by an administrator. It is possible that an attacker could potentially escalate their privileges.
Уязвимые конфигурации
Конфигурация 1Версия до 12.1.1 (исключая)
cpe:2.3:a:hcltech:unica:*:*:*:*:*:*:*:*
EPSS
Процентиль: 51%
0.00277
Низкий
8.1 High
CVSS3
8.8 High
CVSS3
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 8.1
github
больше 2 лет назад
A user is capable of assigning him/herself to arbitrary groups by reusing a POST request issued by an administrator. It is possible that an attacker could potentially escalate their privileges.
EPSS
Процентиль: 51%
0.00277
Низкий
8.1 High
CVSS3
8.8 High
CVSS3
Дефекты
NVD-CWE-noinfo