CVE-2019-5644: Computing For Good Basic Laboratory Information System

Описание

Оригинално описание

Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may alter several facets of a user account, including promoting any user to an administrator.

Засегнати продукти

• Computing For Good Basic Laboratory Information System: unspecified до 3.5

Вид слабост

• CWE-284 Неправилен контрол на достъпа

История

Други уязвимости в Computing For Good Basic Laboratory Information System

• 5.3CVE-2019-5643
• 10.0CVE-2019-5617

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2019-5644
• https://nvd.nist.gov/vuln/detail/CVE-2019-5644
• https://blog.rapid7.com/2019/09/10/r7-2019-09-cve-2019-5617-cve-2019-5643-cve-2019-5644-c4g-blis-authentication-and-authorization-vulnerabilities-fixed/