CVE-2022-39029

Smart eVision has inadequate authorization for the database query function. A remote attacker with general user privilege, who is not explicitly authorized to access the information, can access sensitive information...

CVE-2022-39029

CVE-2022-39029 concerns Smart eVision, where the database query function has inadequate authorization. A remote attacker with general user privileges, not explicitly allowed to access the queried data, can access sensitive information. The core issue is insufficient access control on database que...