CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in nfusionsolutions Precious Metals Automated Product Pricing – Pro precious-metals-automated-product-pricing-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Precious Metals Automated Product Pricing – Pro: from n/a through <= 4.0.5.
Explanation of Vulnerability in Simple Terms
Precious Metals Automated Product Pricing – Pro versions up to 4.0.5 lack proper authorization checks, allowing unauthenticated attackers to modify data through the network. The vulnerability requires no user interaction and affects the integrity of stored information. Site administrators should update to a version newer than 4.0.5 immediately.
What an attacker can do
Modify product pricing or other data without logging in.
Potential impact on your site
Attackers can alter pricing data, potentially causing financial loss or customer confusion.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
