CVE-2021-42116mediumCWE-284

CVE-2021-42116: falha de média gravidade em Business-DNA Solutions GmbH TopEase

Unauthorized Menu Item Access in TopEase

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar TopEase

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.8%
Incorrect Access Control in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 allows an authenticated remote attacker to view the Shape Editor and Settings, which are functionality for higher privileged users, via identifying said components in the front-end source code or other means.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Business-DNA Solutions GmbH · TopEase
CVEs relacionadas — Business-DNA Solutions GmbH TopEase

No mesmo produto, das mais perigosas para as menos.

CVE-2021-42544HIGHLack of Rate limiting in Authentication in TopEaseEPSS 1.4%CVE-2021-42115HIGHMissing HTTPOnly flag on sensitive cookie in TopEaseEPSS 1.3%CVE-2021-42545HIGHInsufficient Session Expiration in TopEaseEPSS 1.1%CVE-2021-42120MEDIUMMissing Character Length (Denial of Service) in TopEaseEPSS 1.1%CVE-2021-42123HIGHMissing Upload Filter in TopEaseEPSS 1.1%CVE-2021-42121MEDIUMDenial of Service via Invalid Date Format in TopEaseEPSS 1.0%