Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the reports of other users by inferring the full URL, whose name is easily predictable.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Acuma Acusend未授权远程文件访问漏洞
Vulnerability Description
Acuma是一款信息管理解决方案，集成数据管理，信息提交等内容，可利用WEB接口进行管理操作。 Acuma Acusend对用户提交的URI缺少正确检查，远程攻击者可以利用这个漏洞提交可猜测全路径URL来访问其他用户的信息。 未授权恶意用户可以通过猜测其他用户所属的敏感文件全路径URI来访问，虽然这个URI看起来随机，但是它仅仅依靠时间和日期进行构建，通过多次猜测可以直接访问敏感文件信息。 目前没有提供详细漏洞细节。
CVSS Information
N/A
Vulnerability Type
N/A