Unit4 Polska · Unit4 Polska Teta Web · CVE-2015-1173
**Name of the Vulnerable Software and Affected Versions**
Unit4 Polska TETA Web (formerly TETA Galactica) version 22.62.3.4
**Description**
The issue concerns improper access restriction to certain modules, specifically the Design Mode and Debug Logger mode modules. This allows remote attackers to gain privileges by utilizing crafted `received parameters`.
**Recommendations**
For version 22.62.3.4, restrict access to the Design Mode and Debug Logger mode modules to prevent unauthorized privilege escalation. As a temporary workaround, consider disabling the Design Mode and Debug Logger mode modules until a proper fix is implemented.