5 matches found
CVE-2024-57032
WeGIA 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php. The application does not validate the value of the old password, so it is possible to change the password by placing any value in the senhaantiga field...
CVE-2024-57032
WeGIA 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php. The application does not validate the value of the old password, so it is possible to change the password by placing any value in the senhaantiga field...
CVE-2024-57032
WeGIA versions prior to 3.2.0 are affected by an Incorrect Access Control in controle/control.php. The application does not validate the old password (senha_antiga), allowing a password change by supplying any value. This constitutes a high-severity issue with potential total impact on authentica...
CVE-2024-57032
WeGIA 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php. The application does not validate the value of the old password, so it is possible to change the password by placing any value in the senhaantiga field...
CVE-2024-57032
WeGIA 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php. The application does not validate the value of the old password, so it is possible to change the password by placing any value in the senhaantiga field...