CVE-2013-7435

CVE-2013-7435 details (Evergreen ILS) Affected software: Evergreen open-ils.pcrud endpoint (library system) prior to versions 2.5.9, 2.6.x prior to 2.6.7, and 2.7.x prior to 2.7.4. Root cause: a permission gap in fm_IDL.xml enables retrieval of the settings history without proper authorization. I...