medium4.3
CVE-2021-44836
An issue was discovered in Delta RM 1.2.
Impact
An issue was discovered in Delta RM 1.2. The /risque/risque/workflow/reset endpoint is lacking access controls, and it is possible for an unprivileged user to reopen a risk with a POST request, using the risqueID parameter to identify the risk to be re-opened.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Deltarm | Delta Rm | Version 1.2 |