| Package | Affected versions | Patched versions |
|---|---|---|
| sapphireims | = 4097_1 |
In SapphireIMS 4097_1, a guest user can create a local administrator account on any system that has SapphireIMS installed, because of an Insecure Direct Object Reference (IDOR) in the local user creation function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free