CVE-2021-31927

MEDIUM

4.3

CVSS Severity Score

EPSS Score0.0790%

EPSS Percentile43.02th

Published2021年6月10日

Last Modified2024年11月21日

Vulnerability Description

An Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify any existing user, including users assigned to different environments and clients. It was fixed in v2021.1.0.2.

Affected Platforms (CPE)

📦

Annexcloud

Loyalty Experience Platform

< 2020.1.0.1

References & Advisories

🔗 https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md

🔗 https://www.annexcloud.com/