PT-2021-8565
CVE-2017-16631
·
تاريخ النشر
2021-08-11
·
تاريخ التحديث
2021-08-16
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
SapphireIMS version 4097 1
Description
The issue allows a guest user to change the password of an administrative user by exploiting an Insecure Direct Object Reference (IDOR) in the "Account Password Reset" functionality.
Recommendations
For SapphireIMS version 4097 1, restrict access to the "Account Password Reset" functionality to prevent unauthorized password changes until a fix is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾