runZero Explorer Incorrect Authorization Vulnerability Allowing Unauthorized Access to Explorer Groups

A vulnerability in runZero Explorer could allow access to Explorer groups from outside the authorized organization scope. This issue, related to incorrect authorization, was identified during a routine code security review and has an estimated CVSS score of 4.4 (Medium). The vulnerability was present in versions prior to 4.0.260208.0.

Impact

Exploitation of this vulnerability could lead to unauthorized access to runZero Explorers associated with the targeted organization, allowing an authenticated user to disable Explorers and create blind spots in routine assessments.

Remediation

Users can update to runZero Explorer version 4.0.260208.0 or later to address this vulnerability.