The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote authenticated users to bypass intended restrictions via a direct request to certain URLs.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Notifylink | Notify_technology | enterprise_server (including) | enterprise_server (including) |