CyberRota Analysis
AI-GeneratedThe vulnerability in the ERP system arises from inadequate authentication and authorization controls in its API endpoint, allowing unauthenticated remote attackers to manipulate parameters. This exploitation could result in unauthorized access to sensitive information of other users within the system. Organizations utilizing this ERP system should prioritize remediation efforts due to the critical severity and potential data exposure risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating parameter which could lead to exposure of sensitive information belonging to other users on the targeted system.