Impact Analysis

The impact of this vulnerability is that an attacker could obtain multiple valid tickets or services by making only one payment.

This could lead to financial loss for the service provider and unauthorized access to paid services or events by the attacker.

Useful 0 Not Useful 0

Executive Summary

This vulnerability occurs in the payment integration with Computop-based payment methods where the system does not properly validate payment status responses.

An attacker can exploit this by taking a successful payment status response from one payment and using it for a different payment, thereby gaining access to multiple valid tickets with only one actual payment.

Useful 0 Not Useful 0