CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in CreativeMotion Titan Anti-spam & Security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Titan Anti-spam & Security: from n/a through 7.3.6.
Explanation of Vulnerability in Simple Terms
Titan Anti-spam & Security through version 7.3.6 fails to properly check user permissions before allowing access to sensitive functions. A logged-in user with low privileges can read data they should not have access to, such as configuration settings or other users' information. Update to a version newer than 7.3.6 to resolve this issue.
What an attacker can do
Read sensitive data or configuration they should not have access to.
Potential impact on your site
Unauthorized users can access private settings, user data, or other restricted information.
Conditions required to exploit
Attacker must have a low-privilege account on the site.
Key dates
External resources
Related vulnerabilities
