Rising Technosoft CAP Back Office Application Improper Access Control Vulnerability

An improper access control vulnerability has been identified in the Rising Technosoft CAP back office application, all versions prior to 2.0.4. This vulnerability arises from inadequate authorization checks on certain API endpoints, allowing authenticated remote attackers to manipulate API request URLs and gain unauthorized access to other user accounts.

Impact

Exploitation of this vulnerability could lead to unauthorized access to user accounts, allowing attackers to access sensitive information or perform actions on behalf of the users.

Remediation

Users are advised to upgrade the Rising Technosoft CAP back office application to version 2.0.4 or later.