CVE-2023-6099 | Shenzhen Youkate Industrial Facial Love Cloud Payment System up to 1.0.55.0.0.1 Account /SystemMng.ashx operatorRole privileges management

A vulnerability classified as . This affects an unknown part of the file /SystemMng.ashx of the component Account Handler. The manipulation of the argument operatorRole with the input 00 leads to improper privilege management.

This vulnerability is uniquely identified as CVE-2023-6099. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.