CVE-2015-1173

Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 does not properly restrict access to the (1) Design Mode and (2) Debug Logger mode modules, which allows remote attackers to gain privileges via crafted "received parameters."
Configurations

Configuration 1 (hide)

cpe:2.3:a:unit4:teta_web:*:*:*:*:*:*:*:*

History

21 Nov 2024, 02:24

Type Values Removed Values Added
References () http://packetstormsecurity.com/files/133147/UNIT4TETA-TETA-WEB-22.62.3.4-Authorization-Bypass.html - () http://packetstormsecurity.com/files/133147/UNIT4TETA-TETA-WEB-22.62.3.4-Authorization-Bypass.html -
References () http://seclists.org/fulldisclosure/2015/Aug/68 - () http://seclists.org/fulldisclosure/2015/Aug/68 -

Information

Published : 2015-09-16 18:59

Updated : 2024-11-21 02:24


NVD link : CVE-2015-1173

Mitre link : CVE-2015-1173

CVE.ORG link : CVE-2015-1173


JSON object : View

Products Affected

unit4

  • teta_web
CWE
CWE-284

Improper Access Control