CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VOD Infomaniak: from n/a through <= 1.5.9.
Explanation of Vulnerability in Simple Terms
VOD Infomaniak versions 1.5.9 and earlier lack proper authorization checks, allowing authenticated users to modify content they should not have access to. An attacker with a low-privilege account can alter data integrity without requiring user interaction. The vulnerability affects the application's ability to enforce role-based access controls on sensitive operations.
What an attacker can do
Modify or alter content or settings they should not have permission to change.
Potential impact on your site
Unauthorized users can tamper with video metadata, settings, or other protected data, compromising content integrity.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the VOD Infomaniak instance.
Key dates
External resources
Related vulnerabilities
