CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Access Control
Summary: incorrect access control in the webui in opnsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-05-20
Last Modified Date: 2019-10-28