Description (CNA)
EBM Technologies RISWEB's specific URL path is not properly controlled by permission, allowing attackers to browse specific pages and query sensitive data without login.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| EBM Technologies / RISWEB | affected 1.*; affected 2.* |
CWE
CWE-306
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.