CVE-2019-25068CWE-269
Axios Italia Axios RE Connection REDefault.aspx privileges management
Medium · published June 9, 2022
What it is
A vulnerability classified as critical was found in Axios Italia Axios RE 1.7.0/7.0.0. This vulnerability affects unknown code of the file REDefault.aspx of the component Connection Handler. The manipulation of the argument DBIDX leads to privilege escalation. The attack can be initiated remotely.
The record
Technical detail
- CVSS v3.1
- 6.3 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00565 · 46.2th percentile
- Weakness
- CWE-269 · Improper Privilege Management
- Published
- 2022-06-09T13:10Z
EPSS history
Timeline