EIQ-2018-0012

EIQ-2018-0012

(Former ref.: 16142)

-

Access to data sources through rules

-

2 - MEDIUM

CVSSv3 score not available on NIST NVD.

Planned

A user can access data sources that, based on the permissions associated with the user, would not normally be visible to them by executing rules and search queries.

This enables users to apply actions that may accidentally modify the affected assets in an unexpected or undesirable way.

Permissions should only allow users to access data sources relating to groups that they are a member of.

2.1.0 to 2.7.1 included.

-

   This section is not visible to users accessing the public docs, it's for internal reference   

See also:

• TP 16142