PT-2022-11646

CVE-2021-42641

·

Published

2022-02-02

·

Updated

2022-02-08

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions PrinterLogic Web Stack versions 19.1.1.13 SP9 and below
Description The issue allows an unauthenticated attacker to disclose the username and email address of all users due to an Insecure Direct Object Reference (IDOR) vulnerability.
Recommendations For PrinterLogic Web Stack versions 19.1.1.13 SP9 and below, update to a version above 19.1.1.13 SP9 to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-668: Exposure of Resource to Wrong Sphere
Related identifiers
CVE-2021-42641
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com