CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Unity Business Technology Pty Ltd The E-Commerce ERP profitori allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects The E-Commerce ERP: from n/a through <= 2.1.1.3.
Explanation of Vulnerability in Simple Terms
The E-Commerce ERP versions 2.1.1.3 and earlier lack proper authorization checks, allowing unauthenticated attackers to read, modify, or delete data over the network without special conditions. The vulnerability affects confidentiality, integrity, and availability of the system. Organizations running affected versions should update immediately.
What an attacker can do
Read, modify, or delete data in the ERP system without authentication.
Potential impact on your site
Unauthorized users can access, alter, or destroy business data without logging in.
Conditions required to exploit
Network access to the ERP application; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
