Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with a valid app token to retrieve other app tokens by ID via an HTTP web request. Patched Versions are 3.5.3, 3.4.7, and 2.12.6.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Powershell_universal | Ironmansoftware | 2.0.0 (including) | 2.12.6 (excluding) |
| Powershell_universal | Ironmansoftware | 3.0.0 (including) | 3.4.7 (excluding) |
| Powershell_universal | Ironmansoftware | 3.5.0 (including) | 3.5.3 (excluding) |