Vulnerabilities > CVE-2022-26676 - Incorrect Authorization vulnerability in Aenrich A+Hrd 6.8
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
aEnrich a+HRD has inadequate privilege restrictions, an unauthenticated remote attacker can use the API function to upload and execute malicious scripts to control the system or disrupt service.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |