Security Advisory

CVE-2024-37767

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-07-05 00:00:00
Last updated 2024-11-07 16:02:01
Assigner mitre
State PUBLISHED

Description

Insecure permissions in the component /api/admin/user of 14Finger v1.1 allows attackers to access all user information via a crafted GET request.