CVE-2018-5328 | BDVDB-2026-95269 Detail

Description#

ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows access to various /UserManagement/ privileged modules without authenticating the user; an attacker can misuse these functionalities to perform unauthorized actions, as demonstrated by Edit User Details.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://becomepentester.blogspot.com/2018/01/ZUUSE-BEIMS-ContractorWeb-Privilege-Escalations-CVE-2018-5328.html

Exploit#

No public exploit known

History#

Version 12018-01-15Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.