CVE-2020-11589

2020-04-0621:34:34

mitre

www.cve.org

AI Score

7.4

Confidence

High

EPSS

0.004

Percentile

73.4%

JSON

An Insecure Direct Object Reference issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make a GET request to a certain URL and obtain information that should be provided to authenticated users only.

References

www.criticalstart.com/vulnerabilities-discovered-in-cipace-enterprise-platform/