The product does not sufficiently protect all possible paths that a user can take to access restricted functionality or resources.
N/A
Threat Mapped score: 1.8
Industry: Finiancial
Threat priority: P4 - Informational (Low)
CVE: CVE-2022-29238
Access-control setting in web-based document collaboration tool is not properly implemented by the code, which prevents listing hidden directories but does not prevent direct requests to files in those directories.
| Phase | Note |
|---|---|
| Architecture and Design | N/A |
N/A