aEnrich Technology a+HRD's functionality for front-end retrieval of system configuration values lacks proper restrictions on a specific parameter, allowing attackers to modify this parameter to access certain sensitive system configuration values.
References
| Link | Resource |
|---|---|
| https://www.twcert.org.tw/tw/cp-132-7724-c28d3-1.html |
Configurations
No configuration.
History
14 Oct 2024, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-497 CWE-306 |
15 Apr 2024, 03:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-15 03:16
Updated : 2024-10-14 07:15
NVD link : CVE-2024-3774
Mitre link : CVE-2024-3774
JSON object : View
Products Affected
No product.