Beveiligingsadvies

CVE-2023-45228

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-10-26 16:19:41
Laatst bijgewerkt 2025-01-16 21:28:09
Toegewezen door icscert
CVSS-score 6.5
Status PUBLISHED

Beschrijving

The application suffers from improper access control when editing users. A user with read permissions can manipulate users, passwords, and permissions by sending a single HTTP POST request with modified parameters.