Radia Client Automation Account Access

The vulnerability of the Radia Client Automation program relates to deficiencies in restricting access to certain functions. Exploiting this vulnerability allows a malicious actor to list user accounts through the getUsers request, assign a role to a user account through the addAssigneesToRole...

CVE-2015-1498: Undefined Security Weakness

Persistent Systems Radia Client Automation does not properly restrict access to certain request, which allows remote attackers to 1 enumerate user accounts via a getUsers request, 2 assign a role to a user account via an addAssigneesToRole request, 3 remove a role from a user account via a...

PT-2015-1316

Name of the Vulnerable Software and Affected Versions Persistent Systems Radia Client Automation affected versions not specified Description The issue is related to insufficient access restrictions in certain requests, allowing remote attackers to enumerate user accounts via a "getUsers" request,...