Skip to content
OpenAdvisories
High · 8.8 CVE-2023-42228 EUVD-2023-46687GHSA-76f2-5pmw-p3qg

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can edit their own ACL r…

Published Jan 13, 2025 · Updated Jan 23, 2025 · Assigned by mitre

Description

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can edit their own ACL rules by sending a request to the "AclList/SaveAclRules" administrative function.

References