medium5.3
CVE-2020-26178
In tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download workitem attachments without being authenticated.
Impact
In tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download workitem attachments without being authenticated.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tangro | Business Workflow | before 1.18.1 |