An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files allows a remote attacker to access various sensitive information via an unauthenticated request with a predictable URL.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2020-09-18T14:32:26

Updated: 2024-08-04T13:30:23.519Z

Reserved: 2020-07-27T00:00:00

Link: CVE-2020-15958

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-09-18T15:15:13.483

Modified: 2024-11-21T05:06:32.477

Link: CVE-2020-15958

cve-icon Redhat

No data.