CyberSec.Space Logo
Back to CVE Browser

CVE-2021-40853

HIGH
7.2
CVSS Severity Score
EPSS Score0.0450%
EPSS Percentile24.11th
PublishedDec 17, 2021
Last ModifiedNov 21, 2024

Vulnerability Description

TCMAN GIM does not perform an authorization check when trying to access determined resources. A remote attacker could exploit this vulnerability to access URL that require privileges without having them. The exploitation of this vulnerability might allow a remote attacker to obtain sensible information.

Affected Platforms (CPE)

📦
Tcman

Gim

= 8.0
📦
Tcman

Gim

= 11.0

References & Advisories

🔗 https://www.incibe.es/en/incibe-cert/notices/aviso/tcman-gim-missing-authorization-vulnerability
🔗 https://www.incibe.es/en/incibe-cert/notices/aviso/tcman-gim-missing-authorization-vulnerability

Related Vulnerabilities

CVE-2021-4085010.0

TCMAN GIM is vulnerable to a SQL injection vulnerability inside several available webservice methods in /PC/WebService.asmx.

CVE-2021-408517.5

TCMAN GIM is vulnerable to a lack of authorization in all available webservice methods listed in /PC/WebService.asmx. The exploita...

CVE-2021-408526.1

TCMAN GIM is affected by an open redirect vulnerability. This vulnerability allows the redirection of user navigation to pages con...

CVE-2021-40465.4

The m_txtNom y m_txtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks. This vulnerability ...