Security Advisory

CVE-2015-2858

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-10-02 01:00:00

Last updated 2024-08-06 05:24:38

Assigner certcc

CVSS score not scored

State PUBLISHED

Description

Datalex airline booking software before 2015-09-03 allows remote attackers to read or write to arbitrary user data via a modified profileId parameter to (1) ValidateFormAction.do or (2) ProfileConfirmEditAddressAction.do.

← Browse all CVEs View on cve.org ↗