2 matches found
CVE-2021-45891: Incorrect Resource Transfer Between Spheres
An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4., that allows attackers to escalate privileges within the application, since all permission checks are done client-side, not server-side...
8.8CVSS7.8AI score0.01419EPSS
SaveExploits1References2
PT-2022-12453
Name of the Vulnerable Software and Affected Versions Softwarebuero Zauner ARC version 4.2.0.4 Description An issue in the application allows attackers to escalate privileges, as permission checks are performed client-side rather than server-side. Recommendations For Softwarebuero Zauner ARC...
8.8CVSS0.01419EPSS
SaveExploits1References4
20