PT-2026-78243 · Crowd · Crowd
CVSS v4.0
8.8
High
| Vector | AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
Crowd Data Center version 7.2.1
Description
An issue involving Broken Authentication and Session Management (BASM) allows an unauthenticated attacker to perform actions as another user.
Recommendations
Upgrade to version 7.2.2 or a later release.
Fix
Improper Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Crowd