Description (CNA)
Synapse Mobility 8.0, 8.0.1, 8.0.2, 8.1, and 8.1.1 contain a privilege escalation vulnerability through external control of Web parameter. If exploited, a user of the product may escalate the privilege and access data that the user do not have permission to view by altering the parameters of the search function.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| FUJIFILM Healthcare Americas Corporation / Synapse Mobility | affected 8.0; affected 8.0.1; affected 8.0.2; affected 8.1; affected and 8.1.1 |
CWE
CWE-472
References
- https://healthcaresolutions-us.fujifilm.com/synapse-mobility-vulnerability-notification
- https://jvn.jp/en/vu/JVNVU94286093/
ADP enrichment
No English description supplied.
No references supplied.