Improper access control

2020-05-0717:15:00

PRIOn knowledge base

www.prio-n.com

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.4%

JSON

Improper Control of Resource Identifiers in TCExam 14.2.2 allows a remote, authenticated attacker to access test metadata for which they don’t have permission.

CPENameOperatorVersion
tcexameq14.2.2

CPE	Name	Operator	Version
	tcexam	eq	14.2.2

References

www.tenable.com/security/research/tra-2020-31