Qorela Dc
Monthly
Privilege abuse in Interprobe Information Technologies Inc. Qorela DC from 1.6.1-RC29 before v1.6.2 allows an authenticated low-privilege user to perform higher-privileged actions because authorization checks are missing on affected application functions. The flaw is network-reachable, low-complexity, and requires no user interaction, resulting in high confidentiality, integrity, and availability impact with a CVSS 3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). No public exploit was identified at time of analysis, and upgrading to v1.6.2 removes the exposure.
Privilege abuse in Interprobe Information Technologies Inc. Qorela DC from 1.6.1-RC29 before v1.6.2 allows an authenticated low-privilege user to perform higher-privileged actions because authorization checks are missing on affected application functions. The flaw is network-reachable, low-complexity, and requires no user interaction, resulting in high confidentiality, integrity, and availability impact with a CVSS 3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). No public exploit was identified at time of analysis, and upgrading to v1.6.2 removes the exposure.