6 matches found
CVE-2024-56883
Sage DPW before 202412001 is vulnerable to Incorrect Access Control. The implemented role-based access controls are not always enforced on the server side. Low-privileged Sage users with employee role privileges can create external courses for other employees, even though they do not have the...
CVE-2024-56883
creationtimestamp| type| source ---|---|--- 2025-02-18 18:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihulijfvf2n 2025-02-18 20:59:49+00:00| seen| https://t.me/cvedetector/18350 2025-02-18 21:56:16+00:00| seen|...
CVE-2024-56883
Sage DPW before 202412001 is vulnerable to Incorrect Access Control. The implemented role-based access controls are not always enforced on the server side. Low-privileged Sage users with employee role privileges can create external courses for other employees, even though they do not have the...
CVE-2024-56883
Sage DPW before 202412001 is vulnerable to Incorrect Access Control. The implemented role-based access controls are not always enforced on the server side. Low-privileged Sage users with employee role privileges can create external courses for other employees, even though they do not have the...
CVE-2024-56883
CVE-2024-56883 affects Sage DPW prior to 2024_12_001. The issue is improper server-side access control: RBAC is not consistently enforced, allowing low-privilege employee-role users to create external courses for others by tampering the id parameter in a create request. Impact is elevated access ...
CVE-2024-56883
Sage DPW before 202412001 is vulnerable to Incorrect Access Control. The implemented role-based access controls are not always enforced on the server side. Low-privileged Sage users with employee role privileges can create external courses for other employees, even though they do not have the...