Privilege Escalation in TÜBİTAK BİLGEM eta-register

Executive Summary

This is a Missing Authorization vulnerability in TÜBİTAK BİLGEM's eta-register software. It allows an attacker with low privileges to escalate their access rights. The flaw exists in versions from 2.0.8 up to but not including 2.0.9.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to gain higher privileges than intended, potentially accessing sensitive data or performing unauthorized actions. The high CVSS score indicates significant impact on confidentiality, integrity, and availability.

Useful 0 Not Useful 0

Mitigation Strategies

Update eta-register to version 2.0.9 or later to address the missing authorization vulnerability. Ensure proper access controls are implemented to prevent privilege escalation.

Useful 0 Not Useful 0