Threats tagged 'ghsa-6hp4-rjwq-mvpj'

An incorrect privilege assignment vulnerability exists in Hinemos that allows an attacker with access to the password change API and specific permissions (which can be assigned to non-administrative users) to change the password of an administrative user. This could lead to privilege escalation within the affected system.