Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-17604
HistoryNov 07, 2019 - 4:15 p.m.

Design/Logic Flaw

2019-11-0716:15:00
PRIOn knowledge base
www.prio-n.com
3

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

An Insecure Direct Object Reference (IDOR) vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to change other candidates’ personal information (first name, last name, email, CV, phone number, and all other personal information) by changing the value of the candidate id (the id parameter).

CPENameOperatorVersion
eyecmseq<= 20191015

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

Related for PRION:CVE-2019-17604