#VU103249 Improper access control in AI (Artificial Intelligence)
Published: January 23, 2025
Vulnerability identifier: #VU103249
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: N/A
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
AI (Artificial Intelligence)
AI (Artificial Intelligence)
Software vendor:
kevinquillen
kevinquillen
Description
The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to the affected plugin does not sufficiently check for access to view the preview listing of the logs. A remote attacker can bypass implemented security restrictions and gain unauthorized access to sensitive information on the system.
Remediation
Install updates from vendor's website.