Nebula Informatics SecHard Authorization Bypass Vulnerability Allowing Parameter Injection

A vulnerability allowing authorization bypass through user-controlled keys has been identified in Nebula Informatics SecHard versions prior to 3.6.2-20250805. This issue, which requires low privileges, enables parameter injection, potentially allowing attackers to manipulate application behavior or data.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed on behalf of a user, potentially allowing for further attacks or manipulation of application data.

Remediation

Users and system administrators are advised to upgrade to SecHard version 3.6.2-20250805 or later.