Beveiligingsadvies

CVE-2024-0580

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-01-18 08:47:16

Laatst bijgewerkt 2025-06-02 15:04:10

Toegewezen door INCIBE

CVSS-score 6.5

Status PUBLISHED

Beschrijving

Omission of user-controlled key authorization in the IDMSistemas platform, affecting the QSige product. This vulnerability allows an attacker to extract sensitive information from the API by making a request to the parameter '/qsige.locator/quotePrevious/centers/X', where X supports values 1,2,3, etc.

← Alle CVE's bekijken Bekijk op cve.org ↗