CVE-2022-27967

CVE-2022-27967 affects Cynet 360 Web Portal versions prior to 4.5. The issue enables an unauthenticated/indirect access to a list of excluded files and profiles through a crafted GET request to the endpoint "/WebApp/SettingsExclusion/GetExclusionsProfiles". The exposed data comprises excluded fil...