CVE-2021-31927

MEDIO 4.3CVE-2021-31927 · Published 10/06/2021 · updated 17/06/2026

In breve

CVE-2021-31927 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda loyalty experience platform (annexcloud).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.51%, superiore al 43.4% delle vulnerabilità.
Correzione: aggiornare a 2020.1.0.1 o successiva.

Package	Affected versions	Patched versions
loyalty experience platform annexcloud	`< 2020.1.0.1`	`2020.1.0.1`

Description

An Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify any existing user, including users assigned to different environments and clients. It was fixed in v2021.1.0.2.

References

Accenture/AARO-Bugs · Third Party Advisory
annexcloud.com · Product

Altre vulnerabilità di loyalty experience platform

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free