medium4.3
CVE-2024-7266
Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to list all users i…
Impact
Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to list all users in the system, including those from other organizations. This issue affects EZD RP: from 15 before 15.84, from 16 before 16.15, from 17 before 17.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nask | Ezd Rp | from 15 before 15.84 from 16 before 16.15 from 17 before 17.2 |