Improper Access Control

2023-03-0913:14:10

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

improper access control

vantage6_server

vulnerability

bypass permissions

remote attacker

unauthorized modules

different organizations

restricted

0.001 Low

EPSS

Percentile

27.8%

JSON

vantage6_server is vulnerable to Improper Access Control. A remote attacker is able to bypass permissions and access unauthorized modules because assigning existing users to a different organizations is not restricted.

CPENameOperatorVersion
vantage6-serverle3.7.3
vantage6-serverle3.7.3

CPE	Name	Operator	Version
	vantage6-server	le	3.7.3
	vantage6-server	le	3.7.3

References

github.com/advisories/GHSA-vvjv-97j8-94xh

github.com/vantage6/vantage6/commit/798aca1de142a4eca175ef51112e2235642f4f24

github.com/vantage6/vantage6/pull/562

github.com/vantage6/vantage6/security/advisories/GHSA-vvjv-97j8-94xh

0.001 Low

EPSS

Percentile

27.8%

JSON

Related for VERACODE:39609