CWE Code: 704
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Incorrect Type Conversion or Cast
Summary: three type confusion vulnerabilities exist in cx-one versions 4.50 and prior and cx-protocol versions 2.0 and prior when processing project files. an attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-01-30
Last Modified Date: 2019-10-09