Techin2B Application
Monthly
Authorization bypass in the TECHIN2B Application (builds V1.0.7676.13 through 18092026) allows an authenticated low-privilege user to reach objects, records, or functions that belong to other accounts by tampering with a user-controlled key in the request. The vendor was contacted by TR-CERT before publication but did not respond, so no public exploit code has been identified and no vendor-released patch is available at time of analysis. Exposure is limited in practice to organizations actually running an affected build, but for those deployments the flaw is network-reachable, requires no user interaction, and yields high confidentiality and integrity impact (assessed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L, TR-CERT score 8.8).
Authorization bypass in the TECHIN2B Application (builds V1.0.7676.13 through 18092026) allows an authenticated low-privilege user to reach objects, records, or functions that belong to other accounts by tampering with a user-controlled key in the request. The vendor was contacted by TR-CERT before publication but did not respond, so no public exploit code has been identified and no vendor-released patch is available at time of analysis. Exposure is limited in practice to organizations actually running an affected build, but for those deployments the flaw is network-reachable, requires no user interaction, and yields high confidentiality and integrity impact (assessed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L, TR-CERT score 8.8).