Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2019-9884

eClass platform contains a Broken Access Control vulnerability

Description

eClass platform < ip.2.5.10.2.1 allows an attacker to use GETS method to request /admin page to bypass the password validation and access management page.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

BroadLearning eclass

  • ip to < 2.25.10.2.1affected

References