CVE-2021-42332CWE-285

ShinHer Information Co., LTD. ShinHer StudyOnline System - Improper Authorization-3

Medium · published October 15, 2021

CVSS v3.1
4.3
EPSS
1%
Percentile
54.9
In the wild
Unconfirmed
What it is

The “List View” function of ShinHer StudyOnline System is not under authority control. After logging in with user’s privilege, remote attackers can access the content of other users’ message boards by crafting URL parameters.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00764 · 54.9th percentile
Weakness
CWE-285 · Improper Authorization
Published
2021-10-15T12:10Z
EPSS history
Timeline
  • 15 OCT 12:10Z
    ShinHer Information Co., LTD. ShinHer StudyOnline System - Improper Authorization-3
    cvelistv5