high8.8
CVE-2023-42228
Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control.
Impact
Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can edit their own ACL rules by sending a request to the "AclList/SaveAclRules" administrative function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zucchetti | Helpdeskadvanced | through 11.0.33 |