CVE-2019-18623

Published: Nov 8, 2019

Modified: Aug 5, 2024

PUBLISHED

Description

Escalation of privileges in EnergyCAP 7 through 7.5.6 allows an attacker to access data. If an unauthenticated user clicks on a link on the public dashboard, the resource opens in EnergyCAP with access rights matching the user who created the dashboard.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://energycap.freshdesk.com/support/solutions/articles/31000152837-2019-october-24-security-incident-notification-issue-with-public-dashboards-found-and-resolved

x_refsource_CONFIRM

https://energycap.freshdesk.com/helpdesk/attachments/31016649523

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2019-18623

Description

Affected Products

References