Technical Advisory – ICTFAX 7-4 – Indirect Object Reference

Summary ICTFax is fax to email software maintained by ICTInnovations. In version 7-4 of this product, available through the CentOS software repository, an indirect object reference allows a user of any privilege level to change the password of any other user within the application – including administrators.  Impact Successful exploitation…

Read more

July 22, 2021

2 mins read

Read more