CVE-2021-31927

An Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify any…

published June 10, 2021

CVSS
—
EPSS
1%
Percentile
42.3
In the wild
Unconfirmed
What it is

An Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify any existing user, including users assigned to different environments and clients. It was fixed in v2021.1.0.2.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00506 · 42.3th percentile
Published
2021-06-10T14:58Z
EPSS history
Timeline
  • 10 JUN 14:58Z
    An Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify any…
    cvelistv5