Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47672
HistoryJun 20, 2024 - 8:44 a.m.

Authorization Bypass

2024-06-2008:44:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
authorization bypass
access controls
sensitive information

6.5 Medium

AI Score

Confidence

High

ezsystems/ez-support-tools is vulnerable to Authorization Bypass. The vulnerability is due to insufficient access controls, allowing any authenticated backend user, regardless of their assigned permissions, to view sensitive system information such as phpinfo() output.

6.5 Medium

AI Score

Confidence

High