Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Juraorab

#35493of 53,633
7.5Total CVSS
Vulnerabilities · 1
PT-2024-13855
7.5
2024-01-04
Aoyun Technology · Pbootcms · CVE-2023-50082
**Name of the Vulnerable Software and Affected Versions** Aoyun Technology pbootcms version 3.1.2 **Description** The issue allows remote attackers to gain sensitive information via session leakage, enabling a user to avoid logging into the backend management platform. This is due to incorrect access control. **Recommendations** For Aoyun Technology pbootcms version 3.1.2, consider restricting access to sensitive information and session management functions to minimize the risk of exploitation. As a temporary workaround, review and strengthen the access control mechanisms to prevent unauthorized access to the backend management platform. At the moment, there is no information about a newer version that contains a fix for this vulnerability.