CVE-2018-16970

Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course…

mitre·CWE-538·Published 2018-09-12

CVSS

—

EPSS

0.01

KEV

Exploits

cve.orgen

171 chars

Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course files via a modified id parameter.

NVDen

171 chars

Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course files via a modified id parameter.

NVDes

197 chars

Wisetail Learning Ecosystem (LE) hasta la versión v4.11.6 permite ataques IDOR (Insecure Direct Object Reference) para descargar archivos de cursos no comprados mediante un parámetro id modificado.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.0	8.0	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N
3.0	Primary	NVD	4.3	2.8	1.4	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N