CVE-2021-22858CWE-287

ChanGate EnterPrise Co., Ltd property management system - Broken Authentication

High · published February 17, 2021

CVSS v3.1
8.8
EPSS
1%
Percentile
68.8
In the wild
Unconfirmed
What it is

Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrary commands or files after obtaining user permissions.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01235 · 68.8th percentile
Weakness
CWE-287 · Improper Authentication
Published
2021-02-17T10:45Z
EPSS history
Timeline
  • 17 FEB 10:45Z
    ChanGate EnterPrise Co., Ltd property management system - Broken Authentication
    cvelistv5