CVE-2020-26173
18.12.2020, 10:15
An incorrect access control implementation in Tangro Business Workflow before 1.18.1 allows an attacker to download documents (PDF) by providing a valid document ID and token. No further authentication is required.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| tangro | business_workflow | 𝑥 < 1.18.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration