CVE-2017-16631

In SapphireIMS 4097_1, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference (IDOR) in the…

published August 11, 2021

CVSS
—
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

In SapphireIMS 4097_1, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference (IDOR) in the "Account Password Reset" functionality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00648 · 50.1th percentile
Published
2021-08-11T20:10Z
EPSS history
Timeline
  • 11 AUG 20:10Z
    In SapphireIMS 4097_1, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference (IDOR) in the…
    cvelistv5