Podatność CVE-2024-28029
Publikacja: 2024-03-21   Modyfikacja: 2024-03-22

Opis:

Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality.

Typ:

CWE-285

 (Improper Authorization)

 Referencje:
https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-12
Copyright 2024, cxsecurity.com

 

Back to Top