Opnsense: Security Vulnerabilities
OPNsense 18.7.x before 18.7.7 has Incorrect Access Control.
CVSS Score
6.5
EPSS Score
0.001
Published
2019-06-17
Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request.
CVSS Score
7.2
EPSS Score
0.021
Published
2019-05-20
Page 4