CVE-2024-26263CWE-306

EBM Technologies RISWEB - Improper Access Control

Medium · published February 15, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
35.3
In the wild
Unconfirmed
What it is

EBM Technologies RISWEB's specific URL path is not properly controlled by permission, allowing attackers to browse specific pages and query sensitive data without login.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00420 · 35.3th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2024-02-15T02:56Z
EPSS history
Timeline
  • 15 FEB 02:56Z
    EBM Technologies RISWEB - Improper Access Control
    cvelistv5