Description
Vision Helpdesk before 5.7.0 (patched in 5.6.10) allows attackers to read user profiles via modified serialized cookie data to vis_client_id.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Vision | Helpdesk | < 5.6.10 | 5.6.10 |
Published Apr 16, 2026 · Updated Apr 17, 2026 · Assigned by mitre
Vision Helpdesk before 5.7.0 (patched in 5.6.10) allows attackers to read user profiles via modified serialized cookie data to vis_client_id.
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Vision | Helpdesk | < 5.6.10 | 5.6.10 |