Описание
The access control in the Electronic Official Document Management System from 2100 TECHNOLOGY is not properly implemented, allowing remote attackers with regular privileges to access the account settings functionality and create an administrator account.
Ссылки
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 5.0.77 (исключая)
cpe:2.3:a:electronic_official_document_management_system_project:electronic_official_document_management_system:*:*:*:*:*:*:*:*
EPSS
Процентиль: 57%
0.00353
Низкий
8.8 High
CVSS3
Дефекты
CWE-284
NVD-CWE-Other
Связанные уязвимости
CVSS3: 8.8
github
больше 1 года назад
The access control in the Electronic Official Document Management System from 2100 TECHNOLOGY is not properly implemented, allowing remote attackers with regular privileges to access the account settings functionality and create an administrator account.
EPSS
Процентиль: 57%
0.00353
Низкий
8.8 High
CVSS3
Дефекты
CWE-284
NVD-CWE-Other