← Back to CVE List

CVE-2024-46609

Published: 2024-09-25T01:15Z
Last Modified: 2024-09-27T16:35Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
An access control issue in the CheckVip function in UserController.java of IceCMS v3.4.7 and before allows unauthenticated attackers to access and returns all user information, including passwords > MITRE Terms of Use apply – see LICENSE‑MITRE.txt