CVE-2022-34769

Michlol - rashim web interface Insecure direct object references (IDOR)

State: Published
Severity: 6.3 Medium
Published: Aug 5, 2022
Updated: Sep 16, 2024
Reserved: Jun 29, 2022

Description

Michlol - rashim web interface Insecure direct object references (IDOR). First of all, the attacker needs to login. After he performs log into the system there are some functionalities that the specific user is not allowed to perform. However all the attacker needs to do in order to achieve his goals is to change the value of the ptMsl parameter and then the attacker can access sensitive data that he not supposed to access because its belong to another user.

Scores

CVSS	Score	Vector	Source
3.1	6.3 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L	INCD

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Michlol - rashim webMichlol	187.4392 through 187.4393Affected

References

https://www.gov.il/en/Departments/faq/cve_advisories

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.