Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-6554

Missing authorisation in TCExam

Description

When access to the "admin" folder is not protected by some external authorization mechanisms e.g. Apache Basic Auth, it is possible for any user to download protected information like exam answers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tecnick.com TCExam

Default version status: unaffected

  • 0 to < 15.1.0affected

References