CVE-2017-7312

An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, anyone can add a vendor account or read existing vendor account data (including usernames and passwords).

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-06-07

Last modified

2024-08-05

Weaknesses

CWE-269

Affected products

• Personify360 (Personifycorp)

References

• https://amswoes.wordpress.com/2017/06/06/first-blog-post/