Ftc E Commerce Management Panel
Monthly
Authentication bypass in FTC Software IT Services' FTC E-Commerce Management Panel before 1.0.2 lets remote unauthenticated attackers reach a critical function that is missing access controls (CWE-306), exposing sensitive data and permitting limited unauthorized modification. The CVSS 3.1 base score is 8.2 (AV:N/AC:L/PR:N/UI:N, C:H/I:L/A:N), reflecting easy network exploitation with high confidentiality impact. There is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV.
Authentication bypass in FTC Software IT Services' FTC E-Commerce Management Panel before 1.0.2 lets remote unauthenticated attackers reach a critical function that is missing access controls (CWE-306), exposing sensitive data and permitting limited unauthorized modification. The CVSS 3.1 base score is 8.2 (AV:N/AC:L/PR:N/UI:N, C:H/I:L/A:N), reflecting easy network exploitation with high confidentiality impact. There is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV.