273 – Insecure functionality - Fingerprint
Description
The application allows unsolicited user data updates.
Impact
Update and consult information related to the user.
Recommendation
Make sure that the fields to be updated are the same as those requested from the user.
Threat
Authenticated attacker on the Internet.
Expected Remediation Time
Score 4.0
Default score using CVSS 4.0. It may change depending on the context of the src.
Base 4.0
- Attack vector: N
- Attack complexity: L
- Attack Requirements: N
- Privileges required: L
- User interaction: N
- Confidentiality (VC): N
- Integrity (VI): L
- Availability (VA): N
- Confidentiality (SC): N
- Integrity (SI): N
- Availability (SA): N
Threat 4.0
- Exploit maturity: P