OpenCode Systems USSD Gateway Access Control Vulnerability in Log Reading
Vulnerability
A vulnerability exists in OpenCode Systems USSD Gateway OC Release 5, version 6.13.11, due to incorrect access control in the /aux1/ocussd/trace endpoint. This flaw allows attackers with low-level privileges to access and read server logs.
Impact
Exploitation of this vulnerability could lead to unauthorized access to sensitive server log information.
Added: Nov 26, 2025, 5:17 PM
Updated: Nov 26, 2025, 5:17 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
5.2remediation
0.0relevance
1.2threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.