PT-2020-20174

Name of the Vulnerable Software and Affected Versions Kronos Web Time and Attendance webTA versions 3.8.x through 3.x before 4.0 Description The issue allows an attacker with specific privileges to gain unauthorized administrative privileges within the application. This is achieved through the...

CVE-2020-8494: Undefined Security Weakness

In Kronos Web Time and Attendance webTA 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser servlet allows an attacker with Timekeeper, Master Timekeeper, or HR Admin privileges to gain unauthorized administrative privileges within the application via the empid, userid, pw...