Incorrect access control in the runReport function of MyQ Solution Print Server prior to 8.2 Patch 32 and Central Server prior to 8.2 Patch 22 allows users who do not have appropriate access rights to generate internal reports using a direct URL.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
myq-solution central server |
||
myq-solution central server 8.2 |
||
myq-solution print server |
||
myq-solution print server 8.2 |
Vulmon