CVE-2021-45347

An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use…

published February 14, 2022

CVSS
—
EPSS
1%
Percentile
67.1
In the wild
Unconfirmed
What it is

An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use any password.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01166 · 67.1th percentile
Published
2022-02-14T18:35Z
EPSS history
Timeline
  • 14 FEB 18:35Z
    An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use…
    cvelistv5