CVE-2021-42115highCWE-1004

CVE-2021-42115: high-severity vulnerability in Business-DNA Solutions GmbH TopEase

Missing HTTPOnly flag on sensitive cookie in TopEase

Published · Updated

Follow this CVE+ Monitor TopEase

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.1epss 1.3%
In short

A sensitive cookie in TopEase Platform lacks the HTTPOnly flag, allowing attackers to steal it through JavaScript and hijack user accounts. This vulnerability lets unauthenticated users gain authenticated access by injecting a stolen session cookie.

Technical detail

The session-independent static UID cookie is missing the HTTPOnly flag, enabling XSS attacks to exfiltrate the cookie via JavaScript. An unauthenticated attacker can steal and replay this cookie to escalate privileges to authenticated user status on affected TopEase Platform versions ≤7.1.27.

Summary generated and translated by AI from the official description.
Missing HTTPOnly flag in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 allows an unauthenticated remote attacker to escalate privileges from unauthenticated to authenticated user via stealing and injecting the session- independent and static cookie UID.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected products
Business-DNA Solutions GmbH · TopEase
Related CVEs — Business-DNA Solutions GmbH TopEase

In the same product, most dangerous first.

CVE-2021-42544HIGHLack of Rate limiting in Authentication in TopEaseEPSS 1.4%CVE-2021-42545HIGHInsufficient Session Expiration in TopEaseEPSS 1.1%CVE-2021-42120MEDIUMMissing Character Length (Denial of Service) in TopEaseEPSS 1.1%CVE-2021-42123HIGHMissing Upload Filter in TopEaseEPSS 1.1%CVE-2021-42121MEDIUMDenial of Service via Invalid Date Format in TopEaseEPSS 1.0%CVE-2021-42116MEDIUMUnauthorized Menu Item Access in TopEaseEPSS 0.8%