Viafirma Documents Authorization Weaknesses Allow Privilege Escalation and Unauthorized Data Access

Authorization weaknesses in Viafirma Documents version 3.7.129 enable an authenticated user without privileges to access and list data of other users, utilize features for creating, modifying, and deleting users, and escalate privileges by impersonating other users in the document generation and signing process.

Impact

Exploitation allows unauthorized users to access and manipulate other users' data, misuse user management features, and impersonate users in document-related activities, potentially leading to unauthorized actions or approvals.

Remediation

Users can update to Viafirma Documents version 3.7.139 or Viafirma Documents Compose version 1.9.2 to address this vulnerability.