Security Advisory

CVE-2019-25020

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-02-27 04:27:38
Last updated 2024-08-05 03:00:18
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

An issue was discovered in Scytl sVote 2.1. Because the sdm-ws-rest API does not require authentication, an attacker can retrieve the administrative configuration by sending a POST request to the /sdm-ws-rest/preconfiguration URI.