PT-2019-13315
CVE-2019-13403
·
Published
2019-07-17
·
Updated
2020-08-24
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Temenos CWX version 8.9
Description
The issue is related to Broken Access Control in the /CWX/Employee/EmployeeEdit2.aspx module, allowing unauthorized viewing of user information.
Recommendations
For Temenos CWX version 8.9, consider restricting access to the /CWX/Employee/EmployeeEdit2.aspx module until a fix is available.
Found an issue in the description? Have something to add? Feel free to write us 👾