Summary
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Sparx Systems Enterprise Architect ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
Product
Sparx Enterprise Architect ist ein UML Modellierungswerkzeug.
Vulnerabilities 1
-
High 8.7
Authorization Bypass in Sparx Enterprise Architect
Sparx Enterprise Architect software has a security feature that limits user's actions to those specified in the role. An authenticated attacker can modify the Enterprise Architect client behavior (e.g. using a debugger) and log in as any other user or adminis…
Revision history
-
#1
Initiale Fassung
References
-
CERT Polska: Vulnerabilities in Sparx Systems products vom 2026-05-21
https://cert.pl/en/posts/2026/05/CVE-2026-42096/
-
CVE Record vom 2026-05-21
https://www.cve.org/CVERecord?id=CVE-2026-42098
-
EU Vulnerability Database vom 2026-05-21
https://euvd.enisa.europa.eu/enisa/EUVD-2026-30930
-
CCB Belgium Advisory vom 2026-05-21
https://ccb.belgium.be/advisories/warning-actively-exploited-critical-and-multiple-high-vulnerabilities-sparx-pro-cloud
-
GitHub Advisory Database vom 2026-05-21
https://github.com/advisories/GHSA-j7p7-w7pr-mwpc
-
PoC auf sploit.tech
https://sploit.tech/2026/05/19/Sparx-Enterprise-Architect-PCS.html