CVE-2011-3645

Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights parameter to doccab/doclist.jsp, which leads to…

published September 27, 2011

CVSS
—
EPSS
3%
Percentile
85.2
In the wild
Unconfirmed
What it is

Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights parameter to doccab/doclist.jsp, which leads to arbitrary permission changes; or (2) a modified UserIndex parameter to doccab/userprofile/editprofile.jsp, which selects the settings page of an arbitrary user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02618 · 85.2th percentile
Published
2011-09-27T19:00Z
EPSS history
Timeline
  • 27 SEP 19:00Z
    Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights parameter to doccab/doclist.jsp, which leads to…
    cvelistv5