An issue exists in /fcgi/scrut_fcgi.fcgi in Plixer Scrutinizer prior to 19.3.1. The csvExportReport endpoint action generateCSV does not require authentication and allows an unauthenticated user to export a report and access the results.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
plixer scrutinizer |