CVE-2026-90499

A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This affects the function HrInfoController.updatePass of the file /hr/pass of the component Password Update Handler. The manipulation of the argument hrid results in improper authorization. The attack can be executed remotely. The...

CVE-2026-90499

A vulnerability in lenve vhr 1.0-SNAPSHOT affects the Password Update Handler component, specifically the HrInfoController.updatePass function in the /hr/pass file. The root cause is improper authorization resulting from manipulation of the hrid argument, allowing a remote attacker with low privi...

PT-2026-90800

Name of the Vulnerable Software and Affected Versions lenve vhr version 1.0-SNAPSHOT Description An improper authorization issue exists in the Password Update Handler component. A remote attacker can manipulate the hrid argument within the HrInfoController.updatePass function of the '/hr/pass'...

CVE-2026-90499: Improper Authorization

A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This affects the function HrInfoController.updatePass of the file /hr/pass of the component Password Update Handler. The manipulation of the argument hrid results in improper authorization. The attack can be executed remotely. The...