CVE-2015-1498

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0750%

EPSS Percentile44.31th

PublishedFeb 16, 2015

Last ModifiedMay 6, 2026

Vulnerability Description

Persistent Systems Radia Client Automation does not properly restrict access to certain request, which allows remote attackers to (1) enumerate user accounts via a getUsers request, (2) assign a role to a user account via an addAssigneesToRole request, (3) remove a role from a user account via a removeAssigneesFromRole request, or (4) have other unspecified impact.

Affected Platforms (CPE)

📦

Persistent Systems

Radia Client Automation

All versions

References & Advisories

🔗 http://www.zerodayinitiative.com/advisories/ZDI-15-039/

🔗 https://radiasupport.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features