The vulnerability of the Conarc iChannel system for managing customer relationships, due to lack of access control, allows a hacker to obtain confidential information, modify configurations, or cause service interruptions.

The vulnerability of the Conarc iChannel system for managing customer relationships is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to obtain confidential information, modify configurations, or cause service failures by using the request...

CVE-2017-17759

The CVE-2017-17759 issue affects Conarc iChannel, where the wc.dll?wwMaint~EditConfig endpoint exposes an unauthenticated access vector to an outdated West Wind Web Connection HTTP service. Remote attackers can obtain sensitive information, alter the server configuration, or trigger a denial of s...