Lucene search
Veracode Vulnerability DatabaseVERACODE:35319HistoryApr 29, 2022 - 3:30 a.m.
Improper Access Control
2022-04-2903:30:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
snipe-it
vulnerability
getrequestedindex
assetscontroller
improper access control
insufficient user permissions
unauthorized users
system
EPSS
0.001
Percentile
37.2%
snipe/snipe-it is vulnerable to improper access control. The vulnerability exists in the getRequestedIndex function in AssetsController.php due to insufficient user permissions to assets index which allows unauthorized users to access the system.
Related
prion
prion
Authorization
2022-04-28 15:15:00
cvelist
cvelist
CVE-2022-1511 Missing Authorization in snipe/snipe-it
2022-04-28 00:00:00
github
github
Improper Access Control in snipe/snipe-it
2022-04-29 00:00:23
nvd
nvd
CVE-2022-1511
2022-04-28 15:15:09
huntr
huntr
Improper Access Control
2022-02-23 12:52:57
osv
osv
Improper Access Control in snipe/snipe-it
2022-04-29 00:00:23
CVE-2022-1511
2022-04-28 15:15:09
cve
cve
CVE-2022-1511
2022-04-28 15:15:09