Improper access control

2021-08-1618:15:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.9%

JSON

Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user’s authentication token upon logout, which allows for replaying packets.

CPENameOperatorVersion
lin-cms-flaskeq0.1.1

CPE	Name	Operator	Version
	lin-cms-flask	eq	0.1.1

References

cwe.mitre.org/data/definitions/613.html

github.com/TaleLin/lin-cms-flask/issues/30