Description
An access control bypass vulnerability in Kentico Xperience allows administrators to modify global administrator user privileges via unauthorized requests. Attackers could potentially compromise global administrator accounts and invalidate security-sensitive macros by manipulating user privilege levels.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kentico | Xperience | ≤ 12.0.60 | — |
References
- Kentico DevNet Hotfixes vendor-advisory patch
- VulnCheck Advisory: Kentico Xperience <= 10 Administrator Access Control Bypass third-party-advisory