Описание
The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below uses poor session management, allowing for an unauthenticated attacker to access administrator functionality if any other user is already signed in.
Уязвимые конфигурации
Конфигурация 1Версия до 2.04.560 (включая)
cpe:2.3:a:cs-technologies:evolution:*:*:*:*:*:*:*:*
EPSS
Процентиль: 42%
0.00199
Низкий
8.8 High
CVSS3
Дефекты
CWE-284
CWE-287
Связанные уязвимости
CVSS3: 8.8
github
почти 2 года назад
The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below uses poor session management, allowing for an unauthenticated attacker to access administrator functionality if any other user is already signed in.
EPSS
Процентиль: 42%
0.00199
Низкий
8.8 High
CVSS3
Дефекты
CWE-284
CWE-287