Descor Infocad Broken Authorization Vulnerability Allowing Unauthenticated Access

A broken authorization vulnerability has been identified in Descor Infocad versions through 3.5.1.0, allowing users to access web services without authentication. This flaw, rooted in improperly implemented authorization controls, enables unauthorized actions and SQL query execution, potentially compromising user integrity and application confidentiality.

Impact

Exploitation of this vulnerability allows remote users to access services without authentication, execute SQL queries, and perform actions on behalf of registered users, thereby compromising application integrity and confidentiality.

Remediation

Users can upgrade to Descor Infocad version 3.5.2.0, where this vulnerability has been fixed.