CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Authentication Bypass Using an Alternate Path or Channel vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Authentication Abuse.This issue affects Simple Link Directory: from n/a through < 14.8.1.
Explanation of Vulnerability in Simple Terms
Simple Link Directory versions 14.8.1 and earlier contain an authentication bypass vulnerability that allows unauthenticated attackers to read, modify, or delete data on affected sites. The vulnerability requires no user interaction and can be exploited remotely over the network. All installations of this product should be updated immediately.
What an attacker can do
Read, modify, or delete site data without logging in.
Potential impact on your site
Attackers can compromise your site's data integrity and availability without any credentials.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
