CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Incorrect Privilege Assignment vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancements allows Privilege Escalation.This issue affects Admin and Site Enhancements (ASE): from n/a through <= 7.6.2.1.
Explanation of Vulnerability in Simple Terms
Admin and Site Enhancements (ASE) versions 7.6.2.1 and earlier contain an improper privilege escalation vulnerability. An authenticated user with low privileges can gain high-level access to read, modify, or delete sensitive site data and functionality. The vulnerability requires specific attack conditions but poses significant risk to site integrity and confidentiality.
What an attacker can do
Read, modify, or delete sensitive site data and functionality with elevated privileges.
Potential impact on your site
Compromised user accounts could escalate to admin-level access, risking data theft, site defacement, or malware injection.
Conditions required to exploit
Attacker must have a low-privilege authenticated account; specific attack conditions required.
Key dates
External resources
Related vulnerabilities
