This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
*** Revoking Request *** | |
[Product Description] | |
Experian Hunter is ideal to prevent application fraud for any organisation that deals with application fraud data across multiple channels. | |
[Details] | |
The current Rules and Subrules pages were vulnerable to Modification of Assumed-Immutable Data (MAID) vulnerability. The application does not properly protect assumed-immutable information, such as names and categories of existing Rules and Subrules, from being modified. By default, The application does not allow user to modify the names or categories of existing Rules and Subrules. It only allows user to change the description and criteria of Rules and Subrules. | |
[Impact] | |
The successful exploitation of this vulnerability may result in the addition or modification of data. If the data is tampered with, it becomes untrustworthy. The manipulated data may provide unexpected results when the data is processed. |