PT-2019-14367 · Sitos · Sitos Six

Publicado 2019-10-07 · Atualizado 2019-10-09 · CVE-2019-15747

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SITOS six Build version 6.2.1

Description The issue allows a user with the Seminar Coordinator role to escalate their permissions to the Systemadministrator role due to insufficient server-side checks.

Recommendations For SITOS six Build version 6.2.1, consider restricting the Seminar Coordinator role's access to sensitive areas of the system until a fix is available, and review server-side checks to ensure proper permission validation.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2019-15747

Produtos afetados

Sitos Six

Referências · 3

• https://contextis.com/en/resources/advisories/cve-2019-15747 · Nota
• https://osv.dev/vulnerability/CVE-2019-15747 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-15747 · Nota de Segurança