Improper Access Control

vantage6server is vulnerable to Improper Access Control. A remote attacker is able to bypass permissions and access unauthorized modules because assigning existing users to a different organizations is not restricted...

Observable Response Discrepancy

vantage6server is vulnerable to Observable Response Discrepancy. The vulnerability exists because the login requirement is not properly implemented which allows an attacker to brute force password and observe a valid username response...