Beveiligingsadvies

CVE-2026-92754

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-16 20:32:26

Laatst bijgewerkt 2026-09-16 20:32:26

Toegewezen door VulnCheck

CVSS-score 5.3

Status PUBLISHED

Beschrijving

PatrowlManager through 1.8.4 contains an improper access control vulnerability in the user listing API endpoint where the authorization decorator is commented out. Authenticated attackers with low-privilege accounts can enumerate all users and their privilege flags including superuser and staff status by accessing the endpoint.

← Alle CVE's bekijken Bekijk op cve.org ↗