Authentication flaw

2021-02-2705:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.0%

JSON

An issue was discovered in Scytl sVote 2.1. Because the sdm-ws-rest API does not require authentication, an attacker can retrieve the administrative configuration by sending a POST request to the /sdm-ws-rest/preconfiguration URI.

CPENameOperatorVersion
secure_voteeq2.1

CPE	Name	Operator	Version
	secure_vote	eq	2.1

References

suid.ch/research/CVE-2019-25020.html