ASBS Analytics Dashboard

How it was found

Description: Authenticated users have access to User and Session Analytics for the platform.

References

Impact

Allows a user to see active boards, total candidates, vote rate and estimated completion in the last 12 days by default.

System Host(s)

███,████████

Affected Product(s) and Version(s)

1.09.00.000

CVE Numbers

Steps to Reproduce

Login and Authenticate to ████████

Where the logged in user name is in the top left, select the name, then select My Boards (active boards).

Once that page loads, theres a link 'Home' that when clicks takes you to https█████

Suggested Mitigation/Remediation Actions

Either block access to less permission users from seeing the dashboard, or remove it.