PT-2018-12754

Name of the Vulnerable Software and Affected Versions Subrion version 4.2.1 Description The issue allows user groups without access to the Admin panel to access it, although they cannot perform actions, if the Guests user group has access to the Admin panel. This is due to improper access control...

CVE-2018-14836: Improper Privilege Management

Subrion 4.2.1 is vulnerable to Improper Access control because user groups not having access to the Admin panel are able to access it but not perform actions if the Guests user group has access to the Admin panel...