Description
In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User Interface can escalate privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Internet2 | Grouper | 5.8.3 – ≤ 5.22.5, 6.0.0 – < 6.4.1, 7.0.0 – < 7.5.1 | 6.4.1 |