GHSA-6hp4-rjwq-mvpjHighCVSS 6.5

Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is exploited, an...

Published
November 5, 2026
Last Modified
November 5, 2026

🔗 CVE IDs covered (1)

📋 Description

Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is exploited, an attacker who can access the password change API with specific permissions that can be assigned to non-administrative users may change the password of an administrative user.

🔗 References (4)