Описание
Omission of user-controlled key authorization in the IDMSistemas platform, affecting the QSige product. This vulnerability allows an attacker to extract sensitive information from the API by making a request to the parameter '/qsige.locator/quotePrevious/centers/X', where X supports values 1,2,3, etc.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:idmsistemas:sinergia:2.0:*:*:*:*:*:*:*
EPSS
Процентиль: 29%
0.00106
Низкий
6.5 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-639
Связанные уязвимости
CVSS3: 6.5
github
около 2 лет назад
Omission of user-controlled key authorization in the IDMSistemas platform, affecting the QSige product. This vulnerability allows an attacker to extract sensitive information from the API by making a request to the parameter '/qsige.locator/quotePrevious/centers/X', where X supports values 1,2,3, etc.
EPSS
Процентиль: 29%
0.00106
Низкий
6.5 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-639