CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in vowelweb VW Automobile Lite vw-automobile-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Automobile Lite: from n/a through <= 2.1.
Explanation of Vulnerability in Simple Terms
VW Automobile Lite versions 2.1 and earlier lack proper authorization checks, allowing authenticated users to modify data they should not have access to. An attacker with a low-privilege account can alter or disrupt site functionality. The vulnerability requires valid login credentials but no additional user interaction.
What an attacker can do
Modify or disrupt data and site functionality without proper authorization.
Potential impact on your site
Authenticated users can alter content or settings beyond their intended permissions, risking data integrity.
Conditions required to exploit
Valid login account with low-level privileges; network access to the site.
Key dates
External resources
Related vulnerabilities
