Privilege Escalation

2022-02-1506:09:03

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

privilege escalation

user privileges

supplierscontroller.php

unauthorized access

EPSS

0.001

Percentile

30.4%

JSON

snipe/snipe-it is vulnerable to privilege escalation. The vulnerability exists because it does not properly handle the user privileges in the show function in the ‘SuppliersController.php’ file allowing a user to gain privileges and unauthorized access to confidential resources in the supplier module.