Vulnerability Details CVE-2011-3645
Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights parameter to doccab/doclist.jsp, which leads to arbitrary permission changes; or (2) a modified UserIndex parameter to doccab/userprofile/editprofile.jsp, which selects the settings page of an arbitrary user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.044
EPSS Ranking 88.4%
CVSS Severity
CVSS v2 Score 7.5
References
Products affected by CVE-2011-3645
-
cpe:2.3:a:newgensoft:omnidocs:*