Critical · 9.1 CVE-2024-44760 EUVD-2024-41093GHSA-jg65-m2mw-qhx7

Incorrect access control in the component /servlet/SnoopServlet of Shenzhou News Union Enterprise Management System v5.0 through v18.8 allo…

Published Aug 28, 2024 · Updated Nov 15, 2024 · Assigned by mitre

Description

Incorrect access control in the component /servlet/SnoopServlet of Shenzhou News Union Enterprise Management System v5.0 through v18.8 allows attackers to access sensitive information regarding the server.

References

https://github.com/WarmBrew/web_vul/blob/main/SunmoEMS/SunmoEMS-info.md
https://github.com/WarmBrew/web_vul/blob/main/CVES/CVE-2024-44760.md