Description
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper or missing access control, low privileged users can use administrative functions of the C-MOR web interface. It was found out that different functions are only available to administrative users. However, access those functions is restricted via the web application user interface and not checked on the server side. Thus, by sending corresponding HTTP requests to the web server of the C-MOR web interface, low privileged users can also use administrative functionality, for instance downloading backup files or changing configuration settings.
INFO
Published Date :
2024-09-04T00:00:00.000Z
Last Modified :
2024-09-06T06:03:34.402Z
Source :
mitre
AFFECTED PRODUCTS
The following products are affected by CVE-2024-45170 vulnerability.
| Vendors | Products |
|---|---|
| C-mor |
|
| Za-internet |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2024-45170.
