Vulnerability Description
Persistent Systems Radia Client Automation does not properly restrict access to certain request, which allows remote attackers to (1) enumerate user accounts via a getUsers request, (2) assign a role to a user account via an addAssigneesToRole request, (3) remove a role from a user account via a removeAssigneesFromRole request, or (4) have other unspecified impact.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Persistent Systems | Radia Client Automation | - |
Related Weaknesses (CWE)
References
- http://www.zerodayinitiative.com/advisories/ZDI-15-039/
- https://radiasupport.accelerite.com/hc/en-us/articles/203659814-Accelerite-releaVendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-15-039/
- https://radiasupport.accelerite.com/hc/en-us/articles/203659814-Accelerite-releaVendor Advisory
FAQ
What is CVE-2015-1498?
CVE-2015-1498 is a vulnerability with a CVSS score of 10.0 (HIGH). Persistent Systems Radia Client Automation does not properly restrict access to certain request, which allows remote attackers to (1) enumerate user accounts via a getUsers request, (2) assign a role ...
How severe is CVE-2015-1498?
CVE-2015-1498 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-1498?
Check the references section above for vendor advisories and patch information. Affected products include: Persistent Systems Radia Client Automation.