Description
Incorrect Authorization (CWE-863) in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows a remote attacker in possession of a shared report token, which is intended for read-only access, to create, modify or delete monitoring alerts via the monitoring API.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AxxonSoft | AxxonNet | < 3.28.0 | 3.28.0 |