PT-2021-15233
CVE-2021-22860
·
تاريخ النشر
2021-03-17
·
تاريخ التحديث
2021-03-23
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
EIC e-document system (affected versions not specified)
Description
The issue concerns the EIC e-document system, which fails to perform complete identity verification for sorting and filtering personnel data. This allows a remote attacker to obtain user credential information without logging into the system, potentially leading to the acquisition of privileged permissions and the execution of arbitrary commands.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾