← voltar
CVE-2024-50967

CVE-2024-50967

CVSS 6.5 MEDIUMEPSS 1.6%CWE-862
The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://datagerry.readthedocs.io/en/latest/api/rest/user-management.html#rightshttps://github.com/0xByteHunter/CVE-2024-50967https://medium.com/@0xbytehunter/my-first-cve-discovery-of-broken-access-control-in-the-datagerry-platform-7b0404f88a43