CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Access Control
Summary: incorrect access control in the webui in opnsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-05-20
Last Modified Date: 2019-10-28
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Improper Access Control.
user
CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Access Control
Summary: incorrect access control in the webui in opnsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-05-20
Last Modified Date: 2019-10-28
assistant