CoreCVE
Back

HIGH

Incorrect Access Control vulnerability in Hashtopussy 0.4.0 allows remote authenticated users to execute actions that should only be available for administrative roles, as demonstrated by an action=createVoucher request to agents.php

Published Jul 27, 2017

Description

Incorrect Access Control vulnerability in Hashtopussy 0.4.0 allows remote authenticated users to execute actions that should only be available for administrative roles, as demonstrated by an action=createVoucher request to agents.php.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-269

Improper Privilege Management

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 27, 2017
Updated Aug 5, 2024
Reserved Jul 26, 2017
Link CVE-2017-11681
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2017-11681
Red Hat
Severity n/a
Public date n/a
Links CVE-2017-11681