2 matches found
CVE-2020-25096
LogRhythm Platform Manager PM 7.4.9 has Incorrect Access Control. Users within LogRhythm can be delegated different roles and privileges, intended to limit what data and services they can interact with. However, no access control is enforced for WebSocket-based communication to the PM application...
8.8CVSS8.7AI score0.01024EPSS
SaveExploits0References1
Design/Logic Flaw
LogRhythm Platform Manager PM 7.4.9 has Incorrect Access Control. Users within LogRhythm can be delegated different roles and privileges, intended to limit what data and services they can interact with. However, no access control is enforced for WebSocket-based communication to the PM application...
6.5CVSS8.6AI score0.01024EPSS
SaveExploits0References1Affected Software1
20