4 matches found
CVE-2024-46609
An access control issue in the CheckVip function in UserController.java of IceCMS v3.4.7 and before allows unauthenticated attackers to access and returns all user information, including passwords...
CVE-2024-46609
An access control issue in the CheckVip function in UserController.java of IceCMS v3.4.7 and before allows unauthenticated attackers to access and returns all user information, including passwords...
CVE-2024-46609
IceCMS vulnerability CVE-2024-46609 affects IceCMS v3.4.7 and earlier. The root cause is an access control flaw in the CheckVip function of UserController.java, allowing unauthenticated attackers to retrieve all user information, including passwords. The issue is consistently described across mul...
