Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Deepak983

#30089of 56,330
9Total CVSS
Vulnerabilities · 1
PT-2022-8601
9
2022-09-14
Yellowfin · Yellowfin Business Intelligence · CVE-2020-19586
**Name of the Vulnerable Software and Affected Versions** Yellowfin Business Intelligence version 7.3 **Description** The issue is related to Incorrect Access Control, allowing remote attackers to escalate privileges via the MIAdminStyles.i4 Admin UI. **Recommendations** For Yellowfin Business Intelligence version 7.3, update to a version that includes a fix for the Incorrect Access Control issue to prevent privilege escalation. As a temporary workaround, consider restricting access to the MIAdminStyles.i4 Admin UI until a patch is available.