PT-2026-22042 · Unknown · Fosrl Pangolin
CVSS v2.0
6.5
Medium
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
fosrl Pangolin versions up to 1.15.4-s.3
Description
A flaw exists in the Role Handler component of fosrl Pangolin. Specifically, the
verifyRoleAccess/verifyApiKeyRoleAccess function is susceptible to manipulation, resulting in improper access controls. Remote exploitation is possible, and the exploit has been publicly disclosed.Recommendations
Upgrade to version 1.15.4-s.4.
Exploit
Fix
Improper Access Control
Incorrect Privilege Assignment
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Fosrl Pangolin