CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in bizswoop BizPrint print-google-cloud-print-gcp-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BizPrint: from n/a through <= 4.6.7.
Explanation of Vulnerability in Simple Terms
BizPrint versions 4.6.7 and earlier lack proper authorization checks, allowing authenticated users to read sensitive data they should not access. An attacker with a low-privilege account can view confidential information without additional interaction. The vulnerability does not allow data modification or system unavailability. Update to a version newer than 4.6.7.
What an attacker can do
Read sensitive data belonging to other users or the system without authorization.
Potential impact on your site
User data and system information may be exposed to any authenticated account holder, even those with minimal permissions.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the BizPrint installation.
Key dates
External resources
Related vulnerabilities
