CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in DevItems Support Genix support-genix-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Support Genix: from n/a through <= 1.4.11.
Explanation of Vulnerability in Simple Terms
Support Genix versions up to 1.4.11 contain an authorization flaw that allows authenticated users to modify data they should not have access to. An attacker with a low-privilege account can alter information through the application without requiring user interaction. The vulnerability does not expose sensitive data or cause service disruption, but integrity of stored information is at risk.
What an attacker can do
Modify data in the application that should be restricted to higher-privilege users.
Potential impact on your site
Users' data may be altered by attackers with basic account access; data integrity cannot be guaranteed.
Conditions required to exploit
Attacker must have a low-privilege authenticated account; no user interaction required.
Key dates
External resources
