CVE-2015-1498: Undefined Security Weakness

Persistent Systems Radia Client Automation does not properly restrict access to certain request, which allows remote attackers to 1 enumerate user accounts via a getUsers request, 2 assign a role to a user account via an addAssigneesToRole request, 3 remove a role from a user account via a...

PT-2015-1316

Name of the Vulnerable Software and Affected Versions Persistent Systems Radia Client Automation affected versions not specified Description The issue is related to insufficient access restrictions in certain requests, allowing remote attackers to enumerate user accounts via a "getUsers" request,...