Description. ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows access to various /UserManagement/ privileged modules without authenticating the user; an attacker can misuse these functionalities to perform unauthorized actions, as demonstrated by Edit User Details. Source: MITRE Last Modified: ...
from Google Alert - vulnerability http://ift.tt/2myOnl5
via IFTTT
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment