Security Advisory

CVE-2021-44836

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-01-18 19:26:28
Last updated 2024-08-04 04:32:13
Assigner mitre
State PUBLISHED

Description

An issue was discovered in Delta RM 1.2. The /risque/risque/workflow/reset endpoint is lacking access controls, and it is possible for an unprivileged user to reopen a risk with a POST request, using the risqueID parameter to identify the risk to be re-opened.