CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Admin and Site Enhancements (ASE): from n/a through <= 8.0.8.
Explanation of Vulnerability in Simple Terms
Admin and Site Enhancements (ASE) versions 8.0.8 and earlier contain an authorization flaw that allows high-privileged users to modify data they should not have access to. The vulnerability requires an authenticated administrator account and does not affect confidentiality or availability. Sites running ASE should update to a version newer than 8.0.8.
What an attacker can do
A high-privileged user can modify data they are not authorized to change.
Potential impact on your site
Administrators with elevated privileges could alter site data beyond their intended scope of control.
Conditions required to exploit
Attacker must have administrator-level access to the site.
Key dates
External resources
Related vulnerabilities
