Vulnerabilities > CVE-2020-13422 - Missing Authorization vulnerability in Openiam

047910
CVSS 8.1 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
openiam
CWE-862

Summary

OpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/* administrative actions.

Vulnerable Configurations

Part Description Count
Application
Openiam
1

Common Weakness Enumeration (CWE)