PT-2021-9088

Name of the Vulnerable Software and Affected Versions Scytl sVote version 2.1 Description An issue was discovered where the sdm-ws-rest API does not require authentication, allowing an attacker to retrieve the administrative configuration by sending a POST request to the...

CVE-2019-25020: Missing Authentication for Critical Function

An issue was discovered in Scytl sVote 2.1. Because the sdm-ws-rest API does not require authentication, an attacker can retrieve the administrative configuration by sending a POST request to the /sdm-ws-rest/preconfiguration URI...