CVE-2021-43359
Sunnet eHRD has broken access control vulnerability, which allows a remote attacker to access account management page after being authenticated as a general user, then perform privilege escalation to execute arbitrary code and control the system or interrupt services.
Published
2021-12-01T02:15:07.343
Last Modified
2024-11-21T06:29:07.600
Status
Modified
Source
[email protected]
Severity
CVSSv3.1: 8.8 (HIGH)
CVSSv2 Vector
AV:N/AC:L/Au:S/C:C/I:C/A:C
- Access Vector: NETWORK
- Access Complexity: LOW
- Authentication: SINGLE
- Confidentiality Impact: COMPLETE
- Integrity Impact: COMPLETE
- Availability Impact: COMPLETE
Exploitability Score
8.0
Impact Score
10.0
Weaknesses
-
Type: Secondary
CWE-732
-
Type: Primary
NVD-CWE-Other
Affected Vendors & Products
| Type |
Vendor |
Product |
Version/Range |
Vulnerable? |
| Application |
sun
|
ehrd
|
8 |
Yes
|
| Application |
sun
|
ehrd
|
9 |
Yes
|
References