Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-7266

Aug. 7, 2024, 3:17 p.m.

Product(s) Impacted

Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP

  • 15 - 15.84
  • 16 - 16.15
  • 17 - 17.2

Description

Incorrect User Management vulnerability in Naukowa i Akademicka Sie? Komputerowa - Pa?stwowy Instytut Badawczy EZD RP allows logged-in user to list all users in the system, including those from other organizations. This issue affects EZD RP: from 15 before 15.84, from 16 before 16.15, from 17 before 17.2.

Weaknesses

CWE-286
Incorrect User Management

The product does not properly manage a user within its environment.

CWE ID: 286

Date

Published: Aug. 7, 2024, 11:15 a.m.

Last Modified: Aug. 7, 2024, 3:17 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cvd@cert.pl

References