Description (CNA)
A vulnerability was determined in ketr JEPaaS up to 7.2.8. Affected by this vulnerability is an unknown functionality of the file /je/load. This manipulation of the argument Authorization causes improper authorization. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ketr / JEPaaS | affected 7.2.0; affected 7.2.1; affected 7.2.2; affected 7.2.3; affected 7.2.4; affected 7.2.5; affected 7.2.6; affected 7.2.7; affected 7.2.8 |
CWE
CWE-285, CWE-266
References
- https://vuldb.com/?id.334478
- https://vuldb.com/?ctiid.334478
- https://vuldb.com/?submit.695316
- https://github.com/zhangbuneng/The-Jepaas-platform-has-a-vertical-privilege-escalation-vulnerability./issues/1
ADP enrichment
No English description supplied.
No references supplied.