IDAttend IDWeb Access Control Error Vulnerability

IDAttend IDWeb is a web-based module from IDAttend, Inc. A security vulnerability exists in the IDAttend IDWeb application version 3.1.052 and prior versions, which stems from a lack of authentication in the GetActiveToiletPasses method...

PT-2023-21035 · Idweb · Idweb

Name of the Vulnerable Software and Affected Versions: IDWeb application versions 3.1.052 and earlier Description: The issue concerns missing authentication in the GetLogFiles method, allowing unauthenticated attackers to retrieve sensitive log files. Recommendations: For versions 3.1.052 and...