Описание
Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management Server to have full read/write access to MIP Webhooks API.
EPSS
Процентиль: 11%
0.00038
Низкий
6.3 Medium
CVSS3
Дефекты
CWE-862
Связанные уязвимости
CVSS3: 6.3
github
около 2 месяцев назад
Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management Server to have full read/write access to MIP Webhooks API.
EPSS
Процентиль: 11%
0.00038
Низкий
6.3 Medium
CVSS3
Дефекты
CWE-862