3 matches found
Defining resource name as integer may give unintended access in vantage6
ImpactMalicious users may try to get access to resources they are not allowed to see, by creating resources with integers as names.One example where this is a risk, is when users define which users are allowed to run algorithms on their node. This may be defined by username or user id. Now, for...
5.4CVSS6AI score0.00406EPSS
SaveExploits0References9Affected Software1
20