Vulnerabilities > CVE-2020-26173 - Authorization Bypass Through User-Controlled Key vulnerability in Tangro Business Workflow 1.17.5
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
An incorrect access control implementation in Tangro Business Workflow before 1.18.1 allows an attacker to download documents (PDF) by providing a valid document ID and token. No further authentication is required.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |