Threats tagged 'ghsa-j27f-gvg7-cxpv'

AxxonSoft Axxon One versions before 3.2.0 on Windows and Linux have a vulnerability in the security configuration API that allows remote authenticated users with limited privileges to enumerate all user accounts and roles. This occurs because the user configuration request returns complete lists of users and roles regardless of the caller's permissions, leading to exposure of sensitive information.