Описание
The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control, allowing for an unauthenticated attacker to update and add user profiles within the application, and gain full access of the site.
Уязвимые конфигурации
Конфигурация 1Версия до 2.04.560 (включая)
cpe:2.3:a:cs-technologies:evolution:*:*:*:*:*:*:*:*
EPSS
Процентиль: 45%
0.00227
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-284
NVD-CWE-Other
Связанные уязвимости
CVSS3: 9.8
github
почти 2 года назад
The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control, allowing for an unauthenticated attacker to update and add user profiles within the application, and gain full access of the site.
EPSS
Процентиль: 45%
0.00227
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-284
NVD-CWE-Other