CVE-2021-22853
published 2021-02-17CVE-2021-22853: The HR Portal of Soar Cloud System fails to manage access control. While obtaining user ID, remote attackers can access sensitive data via a specific data…
PriorityP428medium5.4CVSS 3.1
AVNACLPRLUINSUCLINAL
EPSS
1.00%
58.6th percentile
The HR Portal of Soar Cloud System fails to manage access control. While obtaining user ID, remote attackers can access sensitive data via a specific data packet, such as user’s login information, further causing the login function not to work.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| hr_portal_project | hr_portal | — | — |
| soar_cloud_system_co_ltd | hr_portal | — | — |
CVSS provenance
nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
nvdv2.05.5MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-02-17
Published