| शीर्षक | yeqifu warehouse latest(git commit aaf29962ba407d22d991781de28796ee7b4670e4) Improper Access Controls |
|---|
| विवरण | Log viewing and deletion endpoints have no authorization checks. Attackers can access or erase login audit logs, which undermines forensic visibility and allows malicious activity to be hidden. This breaks compliance and incident response workflows, enables attackers to cover tracks after privilege escalation, and prevents administrators from detecting brute‑force attempts, suspicious IPs, or abnormal access patterns. |
|---|
| स्रोत | ⚠️ https://github.com/yeqifu/warehouse/issues/59 |
|---|
| उपयोगकर्ता | AliceS614 (UID 94277) |
|---|
| सबमिशन | 23/01/2026 10:51 AM (8 महीनों पहले) |
|---|
| संयम | 06/02/2026 03:16 PM (14 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 344683 [yeqifu warehouse तक aaf29962ba407d22d991781de28796ee7b4670e4 Log Info LoginfoController.java loadAllLoginfo/deleteLoginfo/batchDeleteLoginfo अधिकार वृद्धि] |
|---|
| अंक | 19 |
|---|