Design/Logic Flaw

An issue was discovered in Delta RM 1.2. The /risque/risque/workflow/reset endpoint is lacking access controls, and it is possible for an unprivileged user to reopen a risk with a POST request, using the risqueID parameter to identify the risk to be re-opened...

PT-2022-12240

Name of the Vulnerable Software and Affected Versions Delta RM version 1.2 Description An issue was discovered in the software where the "/risque/risque/workflow/reset" endpoint lacks access controls. This allows an unprivileged user to reopen a risk by sending a POST request and using the risque...

CVE-2021-44836: Authorization Bypass Through User-Controlled Key

An issue was discovered in Delta RM 1.2. The /risque/risque/workflow/reset endpoint is lacking access controls, and it is possible for an unprivileged user to reopen a risk with a POST request, using the risqueID parameter to identify the risk to be re-opened...