Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 26/06/2024 Updated: 21/11/2024

A hardcoded privileged ID within Lumisxp v15.0.x to v16.1.x allows malicious users to bypass authentication and access internal pages and other sensitive information.

LumisXP versions 150x through 161x have a hardcoded privileged identifier that allows attackers to bypass authentication and access internal pages and other sensitive information ...

=====[ Tempest Security Intelligence - ADV-6/2024 ]========================== LumisXP v150x to v161x Author: Rodolfo Tavares Tempest Security Intelligence - Recife, Pernambuco - Brazil =====[ Table of Contents]================================================== Overview Detailed description Timeline of disclosure Thanks & Acknowledgemen ...

CWE-798 https://nvd.nist.gov https://packetstormsecurity.com/files/179503/LumisXP-16.1.x-Hardcoded-Credentials-IDOR.html https://www.first.org/epss http://seclists.org/fulldisclosure/2024/Jul/7 https://gist.github.com/rodnt/f6b3a2ac875b8f13656063eefbfd9812 http://seclists.org/fulldisclosure/2024/Jul/7 https://gist.github.com/rodnt/f6b3a2ac875b8f13656063eefbfd9812

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-33329

Vulnerability Summary

Exploits

Mailing Lists

References

Vulmon Search

About

Products

Connect