Vulnerabilities > CVE-2024-7266 - Incorrect Authorization vulnerability in Nask EZD RP 15/16/17
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
Incorrect User Management vulnerability in Naukowa i Akademicka Siec Komputerowa - Panstwowy Instytut Badawczy EZD RP allows logged-in user to list all users in the system, including those from other organizations. This issue affects EZD RP: from 15 before 15.84, from 16 before 16.15, from 17 before 17.2.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |