CVE-2022-27969

Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of decoy users via a crafted GET request sent to /WebApp/DeceptionUser/GetAllDeceptionUsers...

CVE-2022-27969

CVE-2022-27969 affects Cynet 360 Web Portal prior to v4.5. Root cause: exposed GetAllDeceptionUsers endpoint (/WebApp/DeceptionUser/GetAllDeceptionUsers) that allows retrieving a list of decoy users via a crafted GET request. Impact: unauthorized disclosure of decoy user data. Affected software: ...