CVE-2019-17604

An Insecure Direct Object Reference (IDOR) vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to change other candidates' personal…

published November 7, 2019

CVSS
—
EPSS
1%
Percentile
49.1
In the wild
Unconfirmed
What it is

An Insecure Direct Object Reference (IDOR) vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to change other candidates' personal information (first name, last name, email, CV, phone number, and all other personal information) by changing the value of the candidate id (the id parameter).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00621 · 49.1th percentile
Published
2019-11-07T15:24Z
EPSS history
Timeline
  • 07 NOV 15:24Z
    An Insecure Direct Object Reference (IDOR) vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to change other candidates' personal…
    cvelistv5