CyberRota Analysis
AI-GeneratedA vulnerability exists in a deployment mode designed for read-only access, which inadvertently allows authenticated users to modify tags on stored session records due to an oversight in route pattern configuration. This could lead to unauthorized changes in session data, potentially impacting data integrity and audit trails. Organizations utilizing this deployment mode should prioritize addressing this issue to prevent unauthorized modifications by authenticated users.
Original NVD Description
A deployment mode intended to expose only read access to a bundled packet-analysis component's interface denies a list of write-capable routes by pattern, but the pattern omits routes that modify tags attached to stored session records, and the proxy configuration otherwise permits the request method those routes use. This allows an authenticated user on a deployment intended to be read-only to add or remove tags on stored session records.