الباحثون
رجوع
Raj Kumar Yadav
#13631
من 60,594
23.5
إجمالي CVSS
الثغرات
·
3
عالية
3
PT-2019-9094
2019-04-30
8.8
CVE-2018-15206
Bpc
Bpc Smartvista 2
The issue is related to a CSRF problem. It affects the `/SVFE2/pages/admpages/roles/createrole.jsf` API endpoint.
PT-2019-9095
2019-04-30
7.2
CVE-2018-15207
Bpc
Bpc Smartvista
The issue is related to improper access control in the SVFE module. A normal user can access the "SVFE2/pages/finadmin/currconvrate/currconvrate.jsf" functionality, which should only be accessible to an admin.
PT-2019-9096
2019-04-30
7.5
CVE-2018-15208
Bpc
Bpc Smartvista
The issue concerns a session fixation problem via the `JSESSIONID` parameter.