CyberSec.Space Logo
Back to CVE Browser

CVE-2021-40851

HIGH
7.5
CVSS Severity Score
EPSS Score0.1140%
EPSS Percentile42.48th
PublishedDec 17, 2021
Last ModifiedNov 21, 2024

Vulnerability Description

TCMAN GIM is vulnerable to a lack of authorization in all available webservice methods listed in /PC/WebService.asmx. The exploitation of this vulnerability might allow a remote attacker to obtain information.

Affected Platforms (CPE)

📦
Tcman

Gim

= 8.0
📦
Tcman

Gim

= 11.0

References & Advisories

🔗 https://www.incibe-cert.es/en/early-warning/security-advisories/tcman-gim-sql-improper-authentication
🔗 https://www.incibe-cert.es/en/early-warning/security-advisories/tcman-gim-sql-improper-authentication

Related Vulnerabilities

CVE-2021-4085010.0

TCMAN GIM is vulnerable to a SQL injection vulnerability inside several available webservice methods in /PC/WebService.asmx.

CVE-2021-408537.2

TCMAN GIM does not perform an authorization check when trying to access determined resources. A remote attacker could exploit this...

CVE-2021-408526.1

TCMAN GIM is affected by an open redirect vulnerability. This vulnerability allows the redirection of user navigation to pages con...

CVE-2021-40465.4

The m_txtNom y m_txtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks. This vulnerability ...