Description
Due to insufficient server-side validation, an attacker with login privileges could access certain resources that the attacker should not have access to by changing parameter values.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hikvision | HikCentral Professional | Versions after V2.0.0 and before V2.5.1 | — |