Archibus: >> Archibus Web Central >> 2022.03.01.107 Security Vulnerabilities
An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user to cancel (delete) a booking, created by someone else - even if this basic user is not a member of the booking
CVSS Score
4.3
EPSS Score
0.0
Published
2023-01-10
An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a set of user-controlled parameters that are used to act on the data returned to the user. It allows a basic user to access data unrelated to their role.
CVSS Score
6.5
EPSS Score
0.001
Published
2023-01-10
An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user to access the profile information of all connected users.
CVSS Score
4.3
EPSS Score
0.001
Published
2023-01-10