Alldata · Alldata · CVE-2024-27605
**Name of the Vulnerable Software and Affected Versions**
Alldata version 0.4.6
**Description**
The issue allows users, such as `test`, to query information about the users in the system due to insecure permissions.
**Recommendations**
For Alldata version 0.4.6, restrict access to sensitive user information to prevent unauthorized queries. As a temporary workaround, consider limiting the privileges of the `test` user until a proper fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.