提交 #232560: There is unauthorized review and submission of information on the Maiwei Safety Production Digital Management Platform信息

标题There is unauthorized review and submission of information on the Maiwei Safety Production Digital Management Platform
描述The Maiwei Safety Production Digital Management Platform has unauthorized access to pending approval information, which usually contains sensitive data. If unauthorized access is made to this information, attackers can obtain sensitive data, leading to privacy leakage and data abuse. Unauthorized access to pending approval information may lead to disruption of the approval process, such as malicious tampering, delayed approval, or unauthorized decision-making. This will affect business operations, trust relationships, and workflow. Attackers may exploit the vulnerability of unauthorized access to pending approval information to modify, delete, or add false information. This may lead to misleading and deceiving other personnel involved in the approval process, allowing them to make decisions based on incorrect or inaccurate information. Only specific personnel can access and process. Unauthorized access to this information may compromise confidentiality, exposing sensitive data to unauthorized personnel, leading to potential security risks.
来源⚠️ http://x.x.x.x:18007/api/DataDictionary/GetItemList
用户
 weal (UID 16371)
提交2023-11-03 07時49分 (3 年前)
管理2023-11-13 11時18分 (10 days later)
状态已接受
VulDB条目245062 [Maiwei Safety Production Control Platform 4.1 GetItemList 信息公开]
积分20

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!