Design/Logic Flaw

2021-04-0621:15:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

OpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/* administrative actions.

CPENameOperatorVersion
openiamge4.1.0
openiamlt4.2.0.3

CPE	Name	Operator	Version
	openiam	ge	4.1.0
	openiam	lt	4.2.0.3

References

cwe.mitre.org/data/definitions/862.html

github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md