CVE-2021-38289

2022-07-1212:33:15

mitre

www.cve.org

novastar

vnnox-icare

novaicare

privilege escalation

corporate information

smtp server

delete users

view roles

AI Score

Confidence

High

EPSS

0.001

Percentile

41.4%

JSON

An issue has been discovered in Novastar-VNNOX-iCare Novaicare 7.16.0 that gives attacker privilege escalation and allows attackers to view corporate information and SMTP server details, delete users, view roles, and other unspecified impacts.

References

github.com/viperbluff/Novastar-VNNOX-iCare-Privilege-Escalation

twitter.com/viperbluff/status/1439941380244230150?s=20&t=iPSn8eNxaxUKis5OKSQJRQ