← CVE Intelligence

CVE-2024-29842

Broken Access control on DESKTOP_EDIT_USER_GET_ABACARD_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve ABACARD values PUBLISHED

Description (CNA)

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_ABACARD_FIELDS, allowing for an unauthenticated attacker to return the abacard field of any user

Affected (CNA)

Vendor / productVersions
CS Technologies Australia / Evolution Controlleraffected 2.x

CWE

CWE-200, CWE-284

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.