PT-2023-25011 · Unknown · Temenos Cwx
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Termenos CWX version 8.5.6
Description
The issue concerns broken access control in the Registration page, specifically at the "/Registration.aspx" endpoint, allowing attackers to access sensitive information.
Recommendations
For Termenos CWX version 8.5.6, consider restricting access to the "/Registration.aspx" endpoint until a fix is available. As a temporary workaround, review and strengthen access controls to sensitive information to minimize the risk of exploitation.
Exploit
Fix
Incorrect Permission
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Temenos Cwx