Description
Administrative roles and module permissions are stored in mutable local database fields, allowing privilege escalation for attackers with database write access.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| CompuGroup Medical | Infantia | unaffected |
|
||||||
| CompuGroup Medical | Profim | unaffected |
|
||||||
| CompuGroup Medical | Venere | unaffected |
|
No data.
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
Mon, 09 Nov 2026 12:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Administrative roles and module permissions are stored in mutable local database fields, allowing privilege escalation for attackers with database write access. | |
| Title | AIS stores authorization state in locally modifiable databases | |
| Weaknesses | CWE-602 | |
| References |
| |
| Metrics |
cvssV4_0
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: ENISA
Published:
Updated: 2026-11-09T12:04:53.081Z
Reserved: 2026-10-28T19:54:01.399Z
Link: CVE-2026-118795
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses
-
CWE-602
Client-Side Enforcement of Server-Side Security