Lucene search
China National Vulnerability DatabaseCNVD-2021-99268HistoryOct 15, 2021 - 12:00 a.m.
Yellowfin Insecure Direct Object Reference Vulnerability (CNVD-2021-99268)
2021-10-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
0.006 Low
EPSS
Percentile
78.1%
An insecure direct object reference vulnerability exists in versions of Yellowfin prior to 9.6.1, a business intelligence automated analytics, cross-vendor narrative and collaboration software suite. An attacker could exploit the vulnerability by sending a specially crafted HTTP GET request to the page “MIIAvatarImage.i4” to enumerate and download user profile images.
| CPE | Name | Operator | Version |
|---|---|---|---|
| yellowfin yellowfin | lt | 9.6.1 |
Related
cve
cve
CVE-2021-36388
2021-10-14 19:15:09
vulnrichment
vulnrichment
CVE-2021-36388
2021-10-14 18:16:25
prion
prion
Design/Logic Flaw
2021-10-14 19:15:00
cvelist
cvelist
CVE-2021-36388
2021-10-14 18:16:25
nvd
nvd
CVE-2021-36388
2021-10-14 19:15:09
packetstorm
packetstorm
Yellowfin Cross Site Scripting / Insecure Direct Object Reference
2021-10-14 00:00:00
zdt
zdt