CVE-2020-11589 | BDVDB-2026-133501 Detail

Description#

An Insecure Direct Object Reference issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make a GET request to a certain URL and obtain information that should be provided to authenticated users only.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.criticalstart.com/vulnerabilities-discovered-in-cipace-enterprise-platform/

Exploit#

No public exploit known

History#

Version 12020-04-06Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.