CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder ListApp Mobile Manager listapp-mobile-manager allows Authentication Bypass.This issue affects ListApp Mobile Manager: from n/a through <= 1.7.7.
Explanation of Vulnerability in Simple Terms
ListApp Mobile Manager versions up to 1.7.7 contain an authentication bypass vulnerability. An attacker can gain unauthorized access to the application without valid credentials, potentially reading, modifying, or deleting data. No user interaction or special privileges are required. Organizations using affected versions should update immediately.
What an attacker can do
Gain unauthorized access and read, modify, or delete application data without valid credentials.
Potential impact on your site
Attackers can access sensitive data, modify content, or disrupt service availability without logging in.
Conditions required to exploit
Network access to the application. No authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
