Back to feed
EUVD-2024-47774 · Published Jul 15, 2024
The access control in the Electronic Official Document Management System from 2100 TECHNOLOGY is not properly implemented, allowing remote attackers with regular privileges to access the account settings functionality and create an administrator account.
Technologies
Electronic_Official_Document_Management_System_Project Electronic Official Document Management System
Weaknesses
CWE-284NVD-CWE-Other
CVSS scores
- v3.18.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
