SUNNET Corporate Training Management System Missing Authentication for Critical Function Vulnerability
Vulnerability
A vulnerability allowing remote access to deployment functionality without authentication has been identified in SUNNET Corporate Training Management System versions prior to 10.11. This issue arises from a missing authentication requirement for critical functions, enabling unauthorized users to exploit the vulnerability.
Impact
Exploitation of this vulnerability could lead to unauthorized access to critical deployment functions, potentially allowing attackers to manipulate or disrupt training management processes.
Added: Aug 30, 2025, 4:17 AM
Updated: Aug 30, 2025, 4:17 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
7.4remediation
0.0relevance
0.4threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
