CVE-2023-25780 — Status Internet Co.,Ltd. PowerBPM - Broken Access Control
It is identified a vulnerability of insufficient authentication in an important specific function of Status PowerBPM. A LAN attacker with normal user privilege can exploit this …
Published: 2023-06-02 · CVSS: 5.7 · CVSS 3.1
It is identified a vulnerability of insufficient authentication in an important specific function of Status PowerBPM. A LAN attacker with normal user privilege can exploit this vulnerability to modify substitute agent to arbitrary users, resulting in serious consequence.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7