2N Access Commander
cpe:2.3:a:2n:access_commander:*:*:*:*:*:*:*
- <= 3.4.1
A log pollution vulnerability exists in 2N Access Commander versions through 3.4.1. This issue allows certain API parameters to be logged without proper validation or sanitization. The vulnerability requires authentication with administrator privileges for exploitation.
Exploitation of this vulnerability leads to unauthorized log pollution, where unvalidated API parameters are improperly recorded in the application logs.
Users can upgrade to 2N Access Commander version 3.5 or later to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.