← CVE Intelligence

CVE-2022-27960

n/a / n/a PUBLISHED

Description (CNA)

Insecure permissions configured in the user_id parameter at SysUserController.java of OFCMS v1.1.4 allows attackers to access and arbitrarily modify users' personal information.

Affected (CNA)

Vendor / productVersions
n/a / n/aaffected n/a

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.