aEnrich Technology a+HRD's functionality for front-end retrieval of system configuration values lacks proper restrictions on a specific parameter, allowing attackers to modify this parameter to access certain sensitive system configuration values.
References
Configurations
No configuration.
History
21 Nov 2024, 09:30
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.twcert.org.tw/tw/cp-132-7724-c28d3-1.html - |
14 Oct 2024, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-497 CWE-306 |
15 Apr 2024, 03:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-15 03:16
Updated : 2024-11-21 09:30
NVD link : CVE-2024-3774
Mitre link : CVE-2024-3774
CVE.ORG link : CVE-2024-3774
JSON object : View
Products Affected
No product.