Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Incorrect Authorization vulnerability in TCMAN GIM
Vulnerability Description
Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an attacker, with low privilege level, to change the password of other users through a POST request using the parameters idUser, PasswordActual, PasswordNew and PasswordNewRepeat in /PC/WebService.aspx/validateChangePassword%C3%B1a. To exploit the vulnerability the PasswordActual parameter must be empty.
CVSS Information
N/A
Vulnerability Type
授权机制不正确
Vulnerability Title
TCMAN GIM 安全漏洞
Vulnerability Description
TCMAN GIM是西班牙TCMAN公司的一款管理系统。 TCMAN GIM v11版本存在安全漏洞，该漏洞源于授权不当，可能导致低权限攻击者通过POST请求更改其他用户密码。
CVSS Information
N/A
Vulnerability Type
N/A