漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Broken access control in NetAdmin 4.030319 returns data with functionalities on the endpoint that "assembles" the functionalities menus, the return of this call is not encrypted and as the system does not validate the session authorization, an attacker can copy the content of the browser of a user with greater privileges having access to the functionalities of the user that the code was copied.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NetAdmin 安全漏洞
Vulnerability Description
NetAdmin是nsnail开源的一个通用后台权限管理系统、快速开发框架。 NetAdmin 4.0.30319版本存在安全漏洞，该漏洞源于可以窃取有效的会话 cookie 并将其注入另一台设备，从而授予未经授权的访问权限。
CVSS Information
N/A
Vulnerability Type
N/A