4 matches found
CVE-2019-12426
an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache OFBiz 16.11.01 to 16.11.06...
CVE-2019-12426
an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache OFBiz 16.11.01 to 16.11.06...
PT-2020-9312
Name of the Vulnerable Software and Affected Versions: Apache OFBiz versions 16.11.01 through 16.11.06 Description: An unauthenticated user could gain access to information from some backend screens by invoking the setSessionLocale function in Apache OFBiz. Recommendations: For Apache OFBiz...
CVE-2019-12426: Undefined Security Weakness
an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache OFBiz 16.11.01 to 16.11.06...