CVE-2014-8558

CVE-2014-8558 affects JExperts Channel Platform 5.0.33_CCB. The vulnerability is an authorization bypass where the attacker can tamper with GET parameters named action and key to escalate privileges. authenticated users with restricted access (e.g., read-only) can access other users’ requests or ...

JExperts Tecnologia / Channel Software Privilege Escalation

CVE-2014-8558 - JExperts Tecnologia / Channel Software Escalation Access Issues Vendor Notified: 2014-10-27 INTRODUCTION: The Channel Platform is an enterprise software project management or project management developed by Brazilian company JExperts Technology and present at thousands clients...