CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in LatePoint LatePoint latepoint allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LatePoint: from n/a through <= 5.2.6.
Explanation of Vulnerability in Simple Terms
LatePoint versions up to 5.2.6 contain an authorization flaw that allows unauthenticated attackers to modify data and disrupt service availability. The vulnerability requires no user interaction and can be exploited over the network. Site administrators should update to a version newer than 5.2.6 to remediate the issue.
What an attacker can do
Modify site data and cause service disruptions without authentication.
Potential impact on your site
Unauthorized changes to site content and potential downtime affecting site availability.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
