CVE-2021-38615

In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/sso/config/ SSO configuration endpoint allows any logged-in user (guest, standard, or admin) to…

Medium · published September 7, 2021

CVSS v3.1
6.3
EPSS
1%
Percentile
60.8
In the wild
Unconfirmed
What it is

In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/sso/config/ SSO configuration endpoint allows any logged-in user (guest, standard, or admin) to view and modify information.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:L/C:L/I:L/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00948 · 60.8th percentile
Published
2021-09-07T11:10Z
EPSS history
Timeline
  • 07 SEP 11:10Z
    In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/sso/config/ SSO configuration endpoint allows any logged-in user (guest, standard, or admin) to…
    cvelistv5