| शीर्षक | Sanitization Management System v1.0 Insufficient Authorization Controls |
|---|
| विवरण | It was observed that Sanitization Management System v1.0 suffers from insufficient authorization controls whereby an unauthenticated attacker could perform sensitive actions by directly invoking the endpoints, thus gaining full control over the web application.
The following functions are affected and could directly be triggered without authentication:
1. creation, modification and deletion of privileged users
2. access to sensitive information such as inquiries and quote requests belonging to other customers
3. deletion and modification of company information
While user would require a valid session ID to access the administrative functions on the browser, it is possible to directly invoke the endpoints using Burpsuite and access the functions without a UI. |
|---|
| उपयोगकर्ता | jiajian (UID 34329) |
|---|
| सबमिशन | 23/10/2022 06:55 PM (4 साल पहले) |
|---|
| संयम | 24/10/2022 07:43 AM (13 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 212017 [SourceCodester Sanitization Management System 1.0 कमजोर प्रमाणीकरण] |
|---|
| अंक | 17 |
|---|