PT-2023-15155 · Unknown · Smart Office Web
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Smart Office Web versions 20.28 and earlier
Description
An issue was discovered that allows attackers to view sensitive information via the "DisplayParallelLogData.aspx" API endpoint.
Recommendations
For versions 20.28 and earlier, consider restricting access to the "DisplayParallelLogData.aspx" endpoint until a patch is available.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Smart Office Web