Beveiligingsadvies

CVE-2026-92600

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-16 16:03:06

Laatst bijgewerkt 2026-09-16 16:03:06

Toegewezen door VulnCheck

CVSS-score 7.1

Status PUBLISHED

Beschrijving

Guns through 8.3.5 contains an information disclosure vulnerability in SysUserController where /sysUser/detail and /sysUser/page endpoints omit requiredPermission configuration, causing the permission interceptor to skip RBAC validation for authenticated users. Attackers with any valid login token can retrieve sensitive user information including account names, real names, email addresses, phone numbers, last login IPs, and role assignments for all users in the system.

← Alle CVE's bekijken Bekijk op cve.org ↗