PT-2022-9922

CVE-2021-29396

·

Published

2022-02-04

·

Updated

2022-07-12

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions NorthStar Club Management version 6.3
Description The issue allows remote unauthenticated users to use various functionalities without authentication due to systemic insecure permissions.
Recommendations For NorthStar Club Management version 6.3, update the system to enforce proper authentication mechanisms for all functionalities to prevent unauthorized access.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-732: Incorrect Permission Assignment for Critical Resource
Related identifiers
CVE-2021-29396
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com