CVE-2021-41298

creationtimestamp| type| source ---|---|--- 2021-09-30 14:37:55+00:00| seen| https://t.me/cibsecurity/29704...

CVE-2021-41298

CVE-2021-41298 – ECOA BAS controller is vulnerable to insecure direct object references (IDOR). The issue allows remote attackers with general user privileges to bypass authorization and access hidden resources or execute privileged functions. Affected products include ECOA ECS Router Controller ...

CVE-2021-41298 ECOA BAS controller - Improper Access Control

ECOA BAS controller is vulnerable to insecure direct object references that occur when the application provides direct access to objects based on user-supplied input. As a result of this vulnerability, attackers with general user's privilege can remotely bypass authorization and access the hidden...