Dominionvoting Imagecast X any version

2.2.8 INCORRECT PRIVILEGE ASSIGNMENT CWE-266

2.2.5 PATH TRAVERSAL: '../FILEDIR' CWE-24

2.2.6 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250

2.2.7 AUTHENTICATION BYPASS BY SPOOFING CWE-290

2.2.3 HIDDEN FUNCTIONALITY CWE-912

2.2.4 IMPROPER PROTECTION OF ALTERNATE PATH CWE-424

2.2.1 IMPROPER VERIFICATION OF CRYPTOGRAPHIC SIGNATURE CWE-347

2.2.2 MUTABLE ATTESTATION OR MEASUREMENT REPORTING DATA CWE-1283

The authentication mechanism used by voters to activate a voting session on the tested version of Dominion Voting Systems ImageCast X is susceptible to forgery. An attacker could leverage this vulnerability to print an arbitrary number of ballots without authorization.