CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Atarim: from n/a through <= 4.0.9.
Explanation of Vulnerability in Simple Terms
Atarim versions 4.0.9 and earlier lack proper authorization checks, allowing unauthenticated attackers to disrupt service availability. The vulnerability requires only network access and no user interaction. An attacker can make repeated requests to exhaust resources and cause the application to become unavailable.
What an attacker can do
Make the application unavailable by exhausting its resources without needing to log in.
Potential impact on your site
Your Atarim installation can be taken offline by an attacker sending resource-exhaustion requests from the internet.
Conditions required to exploit
Network access to the Atarim application; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
