Authorization

2020-11-0516:15:00

PRIOn knowledge base

www.prio-n.com

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

An Authorization Bypass vulnerability in the Marmind web application with version 4.1.141.0 allows users with lower privileges to gain control to files uploaded by administrative users. The accessed files were not visible by the low privileged users in the web GUI.

CPENameOperatorVersion
marmindeq4.1.141.0

CPE	Name	Operator	Version
	marmind	eq	4.1.141.0

References

www.marmind.com/en/

www2.deloitte.com/de/de/pages/risk/articles/marmind-authorization-bypass.html