Digital Infrastructure
Monthly
Authenticated users in multi-tenant Risesoft Digital-Infrastructure deployments through 9.6.11 can export another tenant's personnel directory through the log module DownloadController endpoints exportLoginXLS and exportNotLoginXLS. The flaw is a missing-authorization/IDOR issue: a low-privilege account changes the tenantId parameter to a target tenant's value and receives XLSX files containing names, login names, organization paths, mobile numbers, and email addresses. This is a confidentiality-only cross-tenant data exposure rated CVSS 4.0 7.1 (HIGH); no public exploit was identified at time of analysis, and single-tenant deployments are not affected.
Authenticated users in multi-tenant Risesoft Digital-Infrastructure deployments through 9.6.11 can export another tenant's personnel directory through the log module DownloadController endpoints exportLoginXLS and exportNotLoginXLS. The flaw is a missing-authorization/IDOR issue: a low-privilege account changes the tenantId parameter to a target tenant's value and receives XLSX files containing names, login names, organization paths, mobile numbers, and email addresses. This is a confidentiality-only cross-tenant data exposure rated CVSS 4.0 7.1 (HIGH); no public exploit was identified at time of analysis, and single-tenant deployments are not affected.