CVE-2020-9300

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue involves Access Control problems, including allowing regular users to view restricted incidents, user role escalation to admin, users adding themselves as participants in restricted incidents, and users being able to view restricted incidents via the search feature. The risk of exploitation is lowered if the installation follows secure deployment guidelines, as this can only be exploited by an authenticated user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.