Description
Synapse Mobility 8.0, 8.0.1, 8.0.2, 8.1, and 8.1.1 contain a privilege escalation vulnerability through external control of Web parameter. If exploited, a user of the product may escalate the privilege and access data that the user do not have permission to view by altering the parameters of the search function.
Problem types
External control of assumed-Immutable web parameter
Product status
8.0.1
8.0.2
8.1
and 8.1.1
References
healthcaresolutions-us.fujifilm.com/...rability-notification