PT-2025-9870 · Unknown · Unifiedtransform
CVSS v3.1
3.3
Low
| Vector | AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Unifiedtransform versions 2.X
Description
The issue allows teachers to change the Section Name and Room Number, which are permissions that should be restricted to administrators, due to Incorrect Access Control.
Recommendations
For Unifiedtransform version 2.X, restrict access to the section and room configuration features to administrator roles only, until a proper fix is implemented.
Exploit
Fix
LPE
Improper Access Control
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Unifiedtransform