CVE-2018-19109

tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list directly to read the column list page or edit a column.

tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list directly to read the column list page or edit a column.

tianti 2.3 permite alos usuarios autenticados remotos omitir las restricciones de permisos visitando directamente tianti-module-admin/cms/column/list para leer la página de la lista de columnas o editar una columna.