CyberRota Analysis
AI-GeneratedThe vulnerability in ics-park v.2.0 affects Java applications, allowing remote attackers to escalate privileges through insecure permissions in the RoleController and UserController endpoints. This could lead to unauthorized access and manipulation of user roles and permissions, potentially compromising system integrity. Organizations using this version of ics-park should prioritize remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in RoleController.java and system/user/update endpoint in UserController.java