Описание
HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access controls, allowing users to access or view administrator-level functionalities without appropriate authorization.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:hcltech:icontrol:3.2.0:*:*:*:*:*:*:*
EPSS
Процентиль: 6%
0.00163
Низкий
3.7 Low
CVSS3
5.3 Medium
CVSS3
Дефекты
CWE-284
Связанные уязвимости
CVSS3: 3.7
github
около 1 месяца назад
HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access controls, allowing users to access or view administrator-level functionalities without appropriate authorization.
EPSS
Процентиль: 6%
0.00163
Низкий
3.7 Low
CVSS3
5.3 Medium
CVSS3
Дефекты
CWE-284