Vulnerabilities > CVE-2024-7266 - Incorrect Authorization vulnerability in Nask EZD RP
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
Incorrect User Management vulnerability in Naukowa i Akademicka Siec Komputerowa - Panstwowy Instytut Badawczy EZD RP allows logged-in user to list all users in the system, including those from other organizations. This issue affects EZD RP: from 15 before 15.84, from 16 before 16.15, from 17 before 17.2.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |