An issue was discovered in Scytl sVote 2.1. Because the sdm-ws-rest API does not require authentication, an attacker can retrieve the administrative configuration by sending a POST request to the /sdm-ws-rest/preconfiguration URI.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://suid.ch/research/CVE-2019-25020.html |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-02-27T04:27:38
Updated: 2024-08-05T03:00:18.922Z
Reserved: 2021-02-19T00:00:00
Link: CVE-2019-25020
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-02-27T05:15:13.067
Modified: 2024-11-21T04:39:45.397
Link: CVE-2019-25020
Redhat
No data.