21 matches found
DATAGERRY - REST API Auth Bypass
Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests. id: CVE-2024-46627 info: name: DATAGERRY - REST API Auth Bypass author: gy741 severity: critical description: | Incorrect access control in BECN DATAGERRY v2.2 allows attackers...
DATAGERRY - Improper Access Control
The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information. id: CVE-2024-50967 info: name: DATAGERRY -...
CVE-2024-50967
CVE-2024-50967 DATAGERRY 취약한 접근 제어 이 취약점은 DATAGERRY 플랫폼의 2.2.0까지 포함한 모든 버전≤2.2.0에 영향을 미칩니다...
CVE-2024-46627
CVE-2024-46627 - Controllo di accesso errato in BECN DATAGERRY v2.2 consente agli attaccanti di eseguire comandi arbitrari tramite richieste web appositamente create. DATAGERRY v2.2 non dispone di controllo degli accessi nella REST API per i seguenti endpoint: /rest/users//settings/ GET, POST...
VulnCheck KEV: CVE-2024-50967
The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information...
CVE-2024-46627
Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests...
CVE-2024-50967
The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information...
CVE-2024-50967
The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information...
PT-2025-2896 · Unknown · Becn Datagerry
Name of the Vulnerable Software and Affected Versions: Becon DATAGerry versions prior to 2.3 Description: The /rest/rights/ REST API endpoint contains an Incorrect Access Control issue, allowing an attacker to remotely access this endpoint without authentication. This leads to the unauthorized...
CVE-2024-50967
Becon DATAGerry versions through 2.2.0 (prior to 2.3) are vulnerable to an Incorrect Access Control vulnerability (CWE-862/CWE-200) affecting the /rest/rights/ REST API endpoint. An unauthenticated remote attacker can access this endpoint, leading to the unauthorized disclosure of sensitive infor...
DATAGerry 安全漏洞
DATAGerry is an open source CMDB and asset management tool from DATAGerry Open Source. A security vulnerability exists in DATAGerry, which originates from /rest/rights/ contains an incorrect access control vulnerability...
CVE-2024-50967: Missing Authorization
The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information...
CVE-2024-50967
The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information...
CVE-2024-50967
The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information...
CVE-2024-46627
Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests...
DATAGERRY 安全漏洞
DATAGERRY is an open source CMDB and asset management tool from DATAGerry Open Source. A security vulnerability exists in DATAGERRY version 2.2 that stems from the presence of an incorrect privilege modification that allows an attacker to execute arbitrary commands via a crafted web request...
CVE-2024-46627
Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests...
CVE-2024-46627: Improper Access Control
Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests...
CVE-2024-46627
BECN DATAGERRY v2.2 is vulnerable to an incorrect access control flaw that allows an unauthenticated attacker to execute arbitrary commands via crafted web requests. Specifically, the REST API lacks access control for the following endpoints: /rest/users//settings/ (GET, POST) and /rest/users//se...