Lucene search
China National Vulnerability DatabaseCNVD-2021-99269HistoryOct 15, 2021 - 12:00 a.m.
Yellowfin insecure direct object reference vulnerability
2021-10-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
yellowfin
vulnerability
direct object reference
version 9.6.1
http get
miimage.i4
image enumeration
image download
cnvd
EPSS
0.008
Percentile
82.1%
An insecure direct object reference vulnerability exists in versions of Yellowfin prior to 9.6.1, a business intelligence automated analytics, cross-vendor narrative and collaboration software suite. An attacker could exploit the vulnerability by sending a specially crafted HTTP GET request to the page “MIImage.i4” to enumerate and download an uploaded image.
Related
prion
prion
Design/Logic Flaw
2021-10-14 19:15:00
nvd
nvd
CVE-2021-36389
2021-10-14 19:15:09
cvelist
cvelist
CVE-2021-36389
2021-10-14 18:27:27
cve
cve
CVE-2021-36389
2021-10-14 19:15:09
zdt
zdt
packetstorm
packetstorm
Yellowfin Cross Site Scripting / Insecure Direct Object Reference
2021-10-14 00:00:00