CVE-2017-7312

An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, anyone can add a vendor account or read existing vendor account data including usernames and passwords...

PT-2017-17656

Name of the Vulnerable Software and Affected Versions Personify360 e-Business versions 7.5.2 through 7.6.1 Description An issue in Personify360 e-Business allows unauthorized access to vendor account data. By visiting the "/TabId/275" API endpoint, an attacker can add a new vendor account or read...