CVE-2021-22853CWE-284

Soar Cloud System Co., Ltd. HR Portal - Broken Access Control

Medium · published February 17, 2021

CVSS v3.1
5.4
EPSS
1%
Percentile
63.7
In the wild
Unconfirmed
What it is

The HR Portal of Soar Cloud System fails to manage access control. While obtaining user ID, remote attackers can access sensitive data via a specific data packet, such as user’s login information, further causing the login function not to work.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01041 · 63.7th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-02-17T13:30Z
EPSS history
Timeline
  • 17 FEB 13:30Z
    Soar Cloud System Co., Ltd. HR Portal - Broken Access Control
    cvelistv5