2 matches found
Design/Logic Flaw
An issue was discovered in VeridiumID VeridiumAD 2.5.3.0. The HTTP request to trigger push notifications for VeridiumAD enrolled users does not enforce proper access control. A user can trigger push notifications for any other user. The text contained in the push notification can also be modified...
4.9CVSS7AI score0.00626EPSS
SaveExploits0References3Affected Software1
CVE-2021-42791: Inconsistent Interpretation of HTTP Requests
An issue was discovered in VeridiumID VeridiumAD 2.5.3.0. The HTTP request to trigger push notifications for VeridiumAD enrolled users does not enforce proper access control. A user can trigger push notifications for any other user. The text contained in the push notification can also be modified...
7.3CVSS7.2AI score0.00626EPSS
SaveExploits0References2
20