high7.5
CVE-2023-26576
Missing authentication in the SearchStudentsRFID method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthe…
Impact
Missing authentication in the SearchStudentsRFID method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idattend | Idweb | through 3.1.052 |