CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in Premmerce Premmerce Redirect Manager premmerce-redirect-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce Redirect Manager: from n/a through <= 1.0.12.
Explanation of Vulnerability in Simple Terms
Premmerce Redirect Manager versions up to 1.0.12 lack proper authorization checks, allowing authenticated users with low privileges to read sensitive data they should not access. An attacker with a basic user account can view confidential information without needing to interact with the victim or perform additional steps. The vulnerability does not allow data modification or system unavailability.
What an attacker can do
Read sensitive data accessible only to higher-privileged users.
Potential impact on your site
User data and configuration details may be exposed to any authenticated user, even those with minimal permissions.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
