Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-26598
HistoryMar 28, 2022 - 1:15 a.m.

Design/Logic Flaw

2022-03-2801:15:00
PRIOn knowledge base
www.prio-n.com
2

5.6 Medium

AI Score

Confidence

High

0.04 Low

EPSS

Percentile

92.0%

ImpressCMS before 1.4.3 has Incorrect Access Control because include/findusers.php allows access by unauthenticated attackers (who are, by design, able to have a security token).

CPENameOperatorVersion
impresscmslt1.4.3

5.6 Medium

AI Score

Confidence

High

0.04 Low

EPSS

Percentile

92.0%