title: PTC Vuforia Studio Improper Authorization
description:
An attacker with local access to the machine could record the traffic,
which could allow them to resend requests without the server
authenticating that the user or session are valid.
problem types: CWE-285: Improper Authorization
affected:
{
defaultStatus: unaffected
product: Vuforia Studio
vendor: PTC
versions:
lessThan: 9.9, status: affected, version: 0, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 1.8
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: PTC recommends users upgrade to  Vuforia Studio release 9.9 https://support.ptc.com/help/vuforia/studio/en/  or higher.