Improper access control

Incorrect Access Control in AfficheExplorateurParam in DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to use administrative controllers...

CVE-2019-14765

Incorrect Access Control in AfficheExplorateurParam in DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to use administrative controllers...

CVE-2019-14765

CVE-2019-14765 affects DIMO YellowBox CRM prior to version 6.3.4. The root cause is Incorrect Access Control in AfficheExplorateurParam(), allowing a standard authenticated user to access administrative controllers. CVSSv3.1 base score is 8.8 (HIGH) with network access, low attack complexity, and...

CVE-2019-14765: Undefined Security Weakness

Incorrect Access Control in AfficheExplorateurParam in DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to use administrative controllers...

PT-2020-9600

Name of the Vulnerable Software and Affected Versions DIMO YellowBox CRM versions prior to 6.3.4 Description The issue is related to incorrect access control in the AfficheExplorateurParam function, allowing a standard authenticated user to access administrative controllers. Recommendations For...