DATAGERRY - Improper Access Control

The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information. id: CVE-2024-50967 info: name: DATAGERRY -...

DATAGERRY - REST API Auth Bypass

Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests. id: CVE-2024-46627 info: name: DATAGERRY - REST API Auth Bypass author: gy741 severity: critical description: | Incorrect access control in BECN DATAGERRY v2.2 allows attackers...

CVE-2024-50967

CVE-2024-50967 DATAGERRY Broken Access Control This vulnerability affects DATAGERRY platform in all versions up to and including 2.2.0 ≤2.2.0...

CVE-2024-46627

CVE-2024-46627 - Controllo di accesso errato in BECN DATAGERRY v2.2 consente agli attaccanti di eseguire comandi arbitrari tramite richieste web appositamente create. DATAGERRY v2.2 non dispone di controllo degli accessi nella REST API per i seguenti endpoint: /rest/users//settings/ GET, POST...

VulnCheck KEV: CVE-2024-50967

The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information...

CVE-2024-46627

Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests...

CVE-2024-50967

The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information...

CVE-2024-50967

The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information...

CVE-2024-50967

The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information...

PT-2025-2896 · Unknown · Becn Datagerry

Name of the Vulnerable Software and Affected Versions: Becon DATAGerry versions prior to 2.3 Description: The /rest/rights/ REST API endpoint contains an Incorrect Access Control issue, allowing an attacker to remotely access this endpoint without authentication. This leads to the unauthorized...

DATAGerry security vulnerabilities

DATAGerry is an open source CMDB and asset management tool from DATAGerry Open Source. A security vulnerability exists in DATAGerry, which originates from /rest/rights/ contains an incorrect access control vulnerability...

CVE-2024-50967

Becon DATAGerry versions through 2.2.0 (prior to 2.3) are vulnerable to an Incorrect Access Control vulnerability (CWE-862/CWE-200) affecting the /rest/rights/ REST API endpoint. An unauthenticated remote attacker can access this endpoint, leading to the unauthorized disclosure of sensitive infor...

CVE-2024-50967

The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information...

CVE-2024-50967: Missing Authorization

The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information...

CVE-2024-46627

Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests...

CVE-2024-46627

Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests...

CVE-2024-46627: Improper Access Control

Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests...

CVE-2024-46627

Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests...

CVE-2024-46627

BECN DATAGERRY v2.2 is vulnerable to an incorrect access control flaw that allows an unauthenticated attacker to execute arbitrary commands via crafted web requests. Specifically, the REST API lacks access control for the following endpoints: /rest/users//settings/ (GET, POST) and /rest/users//se...

DATAGERRY security vulnerabilities

DATAGERRY is an open source CMDB and asset management tool from DATAGerry Open Source. A security vulnerability exists in DATAGERRY version 2.2 that stems from the presence of an incorrect privilege modification that allows an attacker to execute arbitrary commands via a crafted web request...