CVE-2020-26176

Published: Dec 18, 2020Modified: Nov 21, 2024

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

An issue was discovered in tangro Business Workflow before 1.18.1. No (or broken) access control checks exist on the /api/document/<DocumentID>/attachments API endpoint. Knowing a document ID, an attacker can list all the attachments of a workitem, including their respective IDs. This allows the attacker to gather valid attachment IDs for workitems that do not belong to them.

Affected (1)

Products: Tangro: Business Workflow

1 product

Business Workflow

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Tangro Business Workflow	Before 1.18.1

Related CWEs

Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

References (4)

https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.tangro.de/

Source: cve@mitre.org

Product

https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://www.tangro.de/

Source: af854a3a-2127-422b-91ae-364da2661108

Product

Timeline

No history available yet.