Описание
A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the absence of proper access control checks.
Уязвимые конфигурации
Конфигурация 1Версия до 10.11 (исключая)
cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*
EPSS
Процентиль: 33%
0.00132
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-862
Связанные уязвимости
CVSS3: 9.8
github
5 месяцев назад
A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the absence of proper access control checks.
EPSS
Процентиль: 33%
0.00132
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-862