Lucene search
+L

CVE-2021-41554

🗓️ 05 Oct 2021 15:00:28Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 59 Views🌐 WEB

ARCHIBUS Web Central 21.3.3.815 does not validate requests, allowing unauthorized access and privilege escalation

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB
CVE-2021-41554
5 Oct 202115:15
attackerkb
circl
Circl
CVE-2021-41554
5 Oct 202118:30
circl
cnnvd
CNNVD
ARCHIBUS Web Central 安全漏洞
5 Oct 202100:00
cnnvd
cvelist
Cvelist
CVE-2021-41554
5 Oct 202115:00
cvelist
nvd
NVD
CVE-2021-41554
5 Oct 202115:15
nvd
osv
OSV
CVE-2021-41554
5 Oct 202115:15
osv
prion
Prion
Code injection
5 Oct 202115:15
prion
ptsecurity
Positive Technologies
PT-2021-23328 · Archibus · Archibus Web Central
5 Oct 202100:00
ptsecurity
redhatcve
RedhatCVE
CVE-2021-41554
22 May 202521:21
redhatcve
NVD
Node
archibusweb_centralMatch21.3.3.815
SourceLink
gruppotimwww.gruppotim.it/redteam
ParameterPositionPathDescriptionCWE
usernamepath/archibus/schema/ab-edit-users.axvwUnauthenticated/incorrectly authenticated access to admin user management page via direct URL; may allow modification of user profiles and privileges.CWE-862
usernamepath/archibus/schema/ab-data-dictionary-table.axvwDirect access to data dictionary management page without proper authorization; could enable privilege escalation or user management actions.CWE-862
usernamepath/archibus/schema/ab-schema-add-field.axvwAccess to schema modification page without enforcing permissions; may allow altering user data or privileges.CWE-862
usernamepath/archibus/schema/ab-core/views/process-navigator/ab-my-user-profile.axvwUser profile page accessible without proper authorization, enabling modification of other users' emails or privileges.CWE-862

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 04:08Current
8.4High risk
Vulners AI Score8.4
CVSS 26.5
CVSS 3.18.8
EPSS0.00875
59