CVE-2021-22860

EIC e-document system - Broken Authentication

Critical · published March 17, 2021

CVSS v3.1
9.8
EPSS
3%
Percentile
85.0
In the wild
Unconfirmed
What it is

🚨 A sneaky gap in the EIC e-document system lets attackers waltz right in and snag user credentials without breaking a sweat! 🔥 Think of it like a receptionist who hands out sensitive information without checking IDs — a major security lapse that could lead to all sorts of trouble. This vulnerability allows attackers to walk right into your sensitive data without even saying "please!" This flaw is absolutely devastating! An attacker could gain unauthorized access to privileged permissions and execute arbitrary commands — it’s like giving a burglar the keys to the vault. Your entire personnel data could be at risk, leading to data breaches and unauthorized actions that could harm your organization.

Put simply

Think of it like a receptionist who hands out sensitive information without checking IDs — a major security lapse that could lead to all sorts of trouble. This vulnerability allows attackers to walk right into your sensitive data without even saying "please!" This vulnerability in the EIC e-document system fails to properly verify user identities during sorting and filtering processes, allowing remote attackers to access sensitive credential information without the need for login.

What to do

This flaw is absolutely devastating! An attacker could gain unauthorized access to privileged permissions and execute arbitrary commands — it’s like giving a burglar the keys to the vault. Your entire personnel data could be at risk, leading to data breaches and unauthorized actions that could harm your organization. Immediate action is critical! Ensure that the EIC e-document system is updated to the latest version where this issue has been patched. Implement robust identity verification processes to safeguard against unauthorized access into your system. 🛡️ You've got this! By taking these steps, you’ll help secure the system and protect your data in no time! 🚀

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02558 · 85.0th percentile
Published
2021-03-17T09:10Z
EPSS history
Timeline
  • 17 MAR 09:10Z
    EIC e-document system - Broken Authentication
    cvelistv5