PT-2021-20409

CVE-2021-34244

Published

2021-06-22

Updated

2021-06-25

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Ice Hrm version 29.0.0.OS

Description: A cross-site request forgery issue was found, allowing attackers to create new admin accounts or change users' passwords.

Recommendations: For Ice Hrm version 29.0.0.OS, update to a version that includes a fix for this issue to prevent unauthorized account modifications.

Exploitability

Exploit

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾