Lucene search
+L

2 matches found

Vulnrichment
Vulnrichment
added 2024/04/14 11:48 p.m.13 views

CVE-2024-29842 Broken Access control on DESKTOP_EDIT_USER_GET_ABACARD_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve ABACARD values

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOPEDITUSERGETABACARDFIELDS, allowing for an unauthenticated attacker to return the abacard field of any user...

7.5CVSS7.1AI score0.00498EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/14 11:48 p.m.29 views

CVE-2024-29842 Broken Access control on DESKTOP_EDIT_USER_GET_ABACARD_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve ABACARD values

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOPEDITUSERGETABACARDFIELDS, allowing for an unauthenticated attacker to return the abacard field of any user...

7.5CVSS7.8AI score0.00498EPSS
SaveExploits0References1
Rows per page
Query Builder