7 matches found
CVE-2024-56883
このリポジトリには README がありません。...
CVE-2024-56883
Sage DPW before 202412001 is vulnerable to Incorrect Access Control. The implemented role-based access controls are not always enforced on the server side. Low-privileged Sage users with employee role privileges can create external courses for other employees, even though they do not have the...
CVE-2024-56883
creationtimestamp| type| source ---|---|--- 2025-02-18 18:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihulijfvf2n 2025-02-18 20:59:49+00:00| seen| https://t.me/cvedetector/18350 2025-02-18 21:56:16+00:00| seen|...
CVE-2024-56883
Sage DPW before 202412001 is vulnerable to Incorrect Access Control. The implemented role-based access controls are not always enforced on the server side. Low-privileged Sage users with employee role privileges can create external courses for other employees, even though they do not have the...
CVE-2024-56883
Sage DPW before 202412001 is vulnerable to Incorrect Access Control. The implemented role-based access controls are not always enforced on the server side. Low-privileged Sage users with employee role privileges can create external courses for other employees, even though they do not have the...
CVE-2024-56883
Sage DPW before 202412001 is vulnerable to Incorrect Access Control. The implemented role-based access controls are not always enforced on the server side. Low-privileged Sage users with employee role privileges can create external courses for other employees, even though they do not have the...
CVE-2024-56883
Sage DPW versions prior to 2024_12_001 are vulnerable to an Incorrect Access Control flaw. The software fails to consistently enforce role-based access controls on the server side, allowing low-privileged users with employee roles to create external courses for other employees. This is achieved b...