Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stratodesk NoTouch Center before 4.4.68 is affected by: Incorrect Access Control. A low privileged user on the platform, for example a user with "helpdesk" privileges, can perform privileged operations including adding a new administrator to the platform via the easyadmin/user/submitCreateTCUser.do page.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Stratodesk Notouch Center 访问控制错误漏洞
Vulnerability Description
Stratodesk Notouch Center是美国Stratodesk公司的一款用于大量客户端及其他设备的管理软件。该软件支持从单一位置访问、控制多个ADI，并且具有管理X86和Raspberry Pi设备的能力。 Stratodesk NoTouch Center 4.4.68之前的版本中存在访问控制错误漏洞。该漏洞源于平台上的低权限用户（例如具有“helpdesk”权限的用户）可以执行特权操作，包括通过easyadmin/user/submitCreateTCUser向平台添加新管理员。
CVSS Information
N/A
Vulnerability Type
N/A