Description (CNA)
The HR Portal of Soar Cloud System fails to manage access control. While obtaining user ID, remote attackers can access sensitive data via a specific data packet, such as user’s login information, further causing the login function not to work.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Soar Cloud System Co., Ltd. / HR Portal | affected 0 7.3.2020.1013 |
CWE
CWE-284
References
- https://www.twcert.org.tw/tw/cp-132-4403-8eb68-1.html
- https://www.chtsecurity.com/news/d334641f-2b28-4eab-a5ed-c6ec6740557e
ADP enrichment
No English description supplied.