CVE-2018-1000133

Pitchfork v1.4.6 RC1 contains an Improper Privilege Management vulnerability in Trident Pitchfork components that lets a logged-in, unprivileged user elevate to System Administrator within the web portal. Root cause: incorrect permission handling that permits self-assigning System Administrator r...

CVE-2018-1000133

Pitchfork version 1.4.6 RC1 contains an Improper Privilege Management vulnerability in Trident Pitchfork components that can result in A standard unprivileged user could gain system administrator permissions within the web portal.. This attack appear to be exploitable via The user must be able to...