GeoVision GV-ASManager 6.1.0.0 - Broken Access Control

Exploit Title: Broken Access Control in GeoVision GV-ASManager Google Dork: inurl:"ASWeb/Login" Date: 02-FEB-2025 Exploit Author: Giorgi Dograshvili DRAGOWN Vendor Homepage: https://www.geovision.com.tw/ Software Link: https://www.geovision.com.tw/download/product/ Version: 6.1.0.0 or less Tested...

CVE-2024-56898

Broken access control vulnerability in Geovision GV-ASWeb with version v6.1.0.0 or less. This vulnerability allows low privilege users perform actions that they aren't authorized to, which can be leveraged to escalate privileges, create, modify or delete accounts...

CVE-2024-56898

Broken access control vulnerability in Geovision GV-ASWeb with version v6.1.0.0 or less. This vulnerability allows low privilege users perform actions that they aren't authorized to, which can be leveraged to escalate privileges, create, modify or delete accounts...

CVE-2024-56898

The Geovision GV-ASWeb web application (version v6.1.0.0 and earlier ) contains a broken access control vulnerability. This flaw allows an attacker with low-level privileges, such as a Guest account (enabled by default), to perform unauthorized actions by supplying a crafted HTTP request . Succes...

CVE-2024-56898

Broken access control vulnerability in Geovision GV-ASWeb with version v6.1.0.0 or less. This vulnerability allows low privilege users perform actions that they aren't authorized to, which can be leveraged to escalate privileges, create, modify or delete accounts...

CVE-2024-56898

Broken access control vulnerability in Geovision GV-ASWeb with version v6.1.0.0 or less. This vulnerability allows low privilege users perform actions that they aren't authorized to, which can be leveraged to escalate privileges, create, modify or delete accounts...

CVE-2024-56898

creationtimestamp| type| source ---|---|--- 2025-02-02 16:00:08+00:00| published-proof-of-concept| Telegram/UyVI-ODfpx-m79cxnYxNG85GR0fDpOs6exyBtw4kZXt7s 2025-02-03 20:53:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113941938396491531 2025-02-03 21:15:40+00:00| seen|...