CVE-2024-37775

Sunbird DCIM dcTrack v9.1.2 is affected by an incorrect access control vulnerability. This flaw allows an attacker to create or update a ticket with a location that bypasses Role-Based Access Control (RBAC) checks. This bypass could allow unauthorized modification of tickets. As a temporary worka...

CVE-2024-37774

A Cross-Site Request Forgery CSRF in Sunbird DCIM dcTrack v9.1.2 allows authenticated attackers to escalate their privileges by forcing an Administrator user to perform sensitive requests in some admin screens...