Design/Logic Flaw

2021-06-1015:15:00

PRIOn knowledge base

www.prio-n.com

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

JSON

An Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify any existing user, including users assigned to different environments and clients. It was fixed in v2021.1.0.2.

CPENameOperatorVersion
loyalty_experience_platformlt2020.1.0.1

CPE	Name	Operator	Version
	loyalty_experience_platform	lt	2020.1.0.1

References

github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md

www.annexcloud.com/