Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Omission of key-controlled authorization in Qsige
Vulnerability Description
Omission of user-controlled key authorization in the IDMSistemas platform, affecting the QSige product. This vulnerability allows an attacker to extract sensitive information from the API by making a request to the parameter '/qsige.locator/quotePrevious/centers/X', where X supports values 1,2,3, etc.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vulnerability Type
通过用户控制密钥绕过授权机制
Vulnerability Title
QSIGE 安全漏洞
Vulnerability Description
QSIGE是QSIGE公司的一个智能候车管理系统。 QSIGE 存在安全漏洞，该漏洞源于省略密钥控制授权，允许攻击者从API中提取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A