CVE-2021-40066

Name of the Vulnerable Software and Affected Versions Mobility versions prior to 11.76 Mobility versions prior to 12.14

Description The access controls on the Mobility read-only API improperly validate user access permissions. Attackers with both network access to the API and valid credentials can read data from it, regardless of access control group membership settings.

Recommendations For Mobility versions prior to 11.76, update to version 11.76 or later to resolve the issue. For Mobility versions prior to 12.14, update to version 12.14 or later to resolve the issue.