💣Exploit CVE-2024-46894 - SINEC INS Authentication Bypass

[Maksim]

CVE ID : CVE-2024-46894
Published : Nov. 12, 2024, 1:15 p.m. | 31 minutes ago
Description : A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly validate authorization of a user to query the "/api/sftp/users" endpoint. This could allow an authenticated remote attacker to gain knowledge about the list of configured users of the SFTP service and also modify that configuration.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.