Description
Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of excluded files and profiles via a crafted GET request sent to /WebApp/SettingsExclusion/GetExclusionsProfiles.
Unscored
CVE-2022-27967
EUVD-2022-32453GHSA-vj5p-8w6w-p4hq
Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of excluded files and profiles via a crafted GET reques…
Published Sep 8, 2022 · Updated Aug 3, 2024 · Assigned by mitre