CVE-2019-12887

LinOTP (KeyIdentity LinOTP) before 2.10.5.3 has an Incorrect Access Control vulnerability (CVE-2019-12887). Affected product: KeyIdentity LinOTP. Root cause: insufficient access restrictions allowing unauthorized roles to access resources. Impact: confidentiality, integrity, and availability can ...