CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in kamleshyadav Medicalequipment medicalequipment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Medicalequipment: from n/a through <= 1.0.9.
Explanation of Vulnerability in Simple Terms
The Medicalequipment application through version 1.0.9 does not properly enforce authorization checks on certain functions. An unauthenticated attacker can read sensitive information by sending network requests directly to the application. No user interaction or special configuration is required to exploit this vulnerability.
What an attacker can do
Read sensitive information without authentication.
Potential impact on your site
Confidential data may be exposed to unauthorized users over the network.
Conditions required to exploit
Network access to the application; no authentication required.
Key dates
External resources
Related vulnerabilities
