SiPass Integrated Access Control Vulnerability

SiPass integrated is an access control system. With the SiPass integrated access control vulnerability, an affected application does not adequately restrict access to the internal message broker system. An attacker could exploit the vulnerability to subscribe to arbitrary message queues...

PT-2021-24120

Name of the Vulnerable Software and Affected Versions: SiPass integrated versions 2.76 through 2.85 Siveillance Identity versions 1.5 through 1.6.283 Description: A vulnerability has been identified in the affected applications, where they insufficiently limit access to the internal message broke...