CVE-2021-25991CWE-284

ifme - Improper Access Control leads to admin deactivation

Medium · published December 29, 2021

CVSS v3.1
5.7
EPSS
1%
Percentile
57.1
In the wild
Unconfirmed
What it is

In Ifme, versions v5.0.0 to v7.32 are vulnerable against an improper access control, which makes it possible for admins to ban themselves leading to their deactivation from Ifme account and complete loss of admin access to Ifme.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00829 · 57.1th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-12-29T09:10Z
EPSS history
Timeline
  • 29 DEC 09:10Z
    ifme - Improper Access Control leads to admin deactivation
    cvelistv5