← volver
CVE-2024-50967

CVE-2024-50967

CVSS 6.5 MEDIUMEPSS 1.6%CWE-862
The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://datagerry.readthedocs.io/en/latest/api/rest/user-management.html#rightshttps://github.com/0xByteHunter/CVE-2024-50967https://medium.com/@0xbytehunter/my-first-cve-discovery-of-broken-access-control-in-the-datagerry-platform-7b0404f88a43