Vulnerabilities > CVE-2024-7266 - Incorrect Authorization vulnerability in Nask EZD RP

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
nask
CWE-863

Summary

Incorrect User Management vulnerability in Naukowa i Akademicka Sie? Komputerowa - Pa?stwowy Instytut Badawczy EZD RP allows logged-in user to list all users in the system, including those from other organizations. This issue affects EZD RP: from 15 before 15.84, from 16 before 16.15, from 17 before 17.2.

Vulnerable Configurations

Part Description Count
Application
Nask
1

Common Weakness Enumeration (CWE)