Skip to content
OpenAdvisories
Medium · 5.8 CVE-2023-27256 EUVD-2023-31034GHSA-pfv4-p727-hwgq

Missing Authentication In IDAttend’s IDWeb Application

Published Oct 25, 2023 · Updated Sep 25, 2024 · Assigned by TML

Description

Missing authentication in the GetLogFiles method in IDAttend’s IDWeb application 3.1.052 and earlier allows retrieval of sensitive log files by unauthenticated attackers.

Affected products

VendorProductAffectedFixed
IDAttend Pty IDWeb ≤ 3.1.052 —

References