medium5.3
CVE-2024-3774
aEnrich Technology a+HRD's functionality for front-end retrieval of system configuration values lacks proper restrictions on a specific parameter, allowing att…
Impact
aEnrich Technology a+HRD's functionality for front-end retrieval of system configuration values lacks proper restrictions on a specific parameter, allowing attackers to modify this parameter to access certain sensitive system configuration values.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aenrich | A\+Hrd | Versions 6.8, 7.0, 7.1, 7.2 |