CVE-2024-46894: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 3. The affected application does not properly validate authorization of a user to query the "/api/sftp/users" endpoint. This could allow an authenticated remote attacker to gain knowledge about the list of configured...

PT-2024-8720

Name of the Vulnerable Software and Affected Versions SINEC INS versions prior to V1.0 SP2 Update 3 Description The issue is related to an error in user authorization checking for the "/api/sftp/users" endpoint. This could allow an authenticated remote attacker to gain knowledge about the list of...