PT-2021-15233

CVE-2021-22860

·

Published

2021-03-17

·

Updated

2021-03-23

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions EIC e-document system (affected versions not specified)
Description The issue concerns the EIC e-document system, which fails to perform complete identity verification for sorting and filtering personnel data. This allows a remote attacker to obtain user credential information without logging into the system, potentially leading to the acquisition of privileged permissions and the execution of arbitrary commands.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾