PT-2022-23442 · Cskefu · Cskefu
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
cskefu version 7.0.1
Description
The issue is related to insecure permissions, allowing unauthenticated attackers to add administrator accounts arbitrarily.
Recommendations
For cskefu version 7.0.1, update to a version that addresses the insecure permissions issue to prevent unauthenticated attackers from adding administrator accounts.
Exploit
Fix
Missing Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cskefu