medium4.3
CVE-2021-44838
An issue was discovered in Delta RM 1.2.
Impact
An issue was discovered in Delta RM 1.2. Using the /risque/risque/ajax-details endpoint, with a POST request indicating the risk to access with the id parameter, it is possible for users to access risks of other companies.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Deltarm | Delta Rm | Version 1.2 |