CAP back office application vulnerabilities
5 known vulnerabilities in CAP back office application from Rising Technosoft. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.2 High severity
CAP back office application: Improper Control of Interaction Frequency
This vulnerability exists in the CAP back office application due to missing rate limiting on OTP requests in an API endpoint. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoint whic
- 8.2 High severity
CAP back office application: Incorrect Authorization
This vulnerability exists in the CAP back office application due to improper authorization checks on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating API request URL to gain unauthorized access to other u
- 8.2 High severity
CAP back office application: Authentication Bypass Using an Alternate Path or Channel
This vulnerability exists in the CAP back office application due to improper implementation of OTP verification mechanism in its API based login. A remote attacker with valid credentials could exploit this vulnerability by manipulating API request URL/payload.
- 8.3 High severity
CAP back office application: Weak Password Recovery Mechanism for Forgotten Password
This vulnerability exists in the CAP back office application due to a weak password-reset mechanism implemented at API endpoints. An authenticated remote attacker with a valid login ID could exploit this vulnerability through vulnerable API endpoint which coul
- 8.2 High severity
CAP back office application: Weak Authentication
This vulnerability exists in the CAP back office application due to improper authentication check at the API endpoint. An unauthenticated remote attacker with a valid login ID could exploit this vulnerability by manipulating API input parameters through API re