Lucene search
+L

3 matches found

Positive Technologies
Positive Technologies
•added 2024/05/15 12:00 a.m.•26 views

PT-2024-22255 · Bonitasoft · Bonitasoft Runtime Community Edition

Name of the Vulnerable Software and Affected Versions: Bonitasoft runtime Community edition affected versions not specified Description: The issue is related to the lack of dynamic permissions in the Community edition of Bonitasoft runtime, which causes an Insecure Direct Object Reference IDOR...

6.5CVSS6.5AI score0.00316EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/15 12:00 a.m.•10 views

CVE-2024-28087: Improper Access Control

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.5CVSS6.6AI score0.00316EPSS
SaveExploits0References1
Mend
Mend
•added 2024/05/15 12:00 a.m.•10 views

CVE-2024-28087

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.9CVSS6.5AI score0.00316EPSS
SaveExploits0References5
Rows per page
Query Builder