Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/01 12:00 a.m.•2 views

CVE-2024-3164: Improper Access Control

In dotCMS dashboard, the Tools and Log Files tabs under System → Maintenance Portlet, which is and always has been an Admin portlet, is accessible to anyone with that portlet and not just to CMS Admins. Users that get site admin but not a system admin, should not have access to the System...

4.5CVSS5.5AI score0.00469EPSS
SaveExploits0References2
Rows per page
Query Builder