medium4.3
CVE-2020-5743
Improper Control of Resource Identifiers in TCExam 14.2.2 allows a remote, authenticated attacker to access test metadata for which they don't have permission.
Impact
Improper Control of Resource Identifiers in TCExam 14.2.2 allows a remote, authenticated attacker to access test metadata for which they don't have permission.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tecnick | Tcexam | Version 14.2.2 |