Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Deepak983

#28499of 53,624
9Total CVSS
Vulnerabilities · 1
PT-2022-8601
9
2022-09-14
Yellowfin · Yellowfin Business Intelligence · CVE-2020-19586
**Name of the Vulnerable Software and Affected Versions** Yellowfin Business Intelligence version 7.3 **Description** The issue is related to Incorrect Access Control, allowing remote attackers to escalate privileges via the MIAdminStyles.i4 Admin UI. **Recommendations** For Yellowfin Business Intelligence version 7.3, update to a version that includes a fix for the Incorrect Access Control issue to prevent privilege escalation. As a temporary workaround, consider restricting access to the MIAdminStyles.i4 Admin UI until a patch is available.