CVE-2015-1498 | BDVDB-2026-68096 Detail

Description#

Persistent Systems Radia Client Automation does not properly restrict access to certain request, which allows remote attackers to (1) enumerate user accounts via a getUsers request, (2) assign a role to a user account via an addAssigneesToRole request, (3) remove a role from a user account via a removeAssigneesFromRole request, or (4) have other unspecified impact.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.zerodayinitiative.com/advisories/ZDI-15-039/
https://radiasupport.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features

Exploit#

No public exploit known

History#

Version 12015-02-16Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.