5 matches found
CVE-2021-3165
SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the //CampaignManager/users URI...
8.8CVSS6.8AI score0.02217EPSS
SaveExploits1References1
CVE-2021-3165
SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the //CampaignManager/users URI...
8.8CVSS8.6AI score0.02217EPSS
SaveExploits1References3
Code injection
SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the //CampaignManager/users URI...
6.5CVSS8.5AI score0.02217EPSS
SaveExploits1References3Affected Software1
CVE-2021-3165
CVE-2021-3165 affects SmartAgent 3.1.0. A ViewOnly attacker can escalate to a SuperUser by accessing the /#/CampaignManager/users URI, enabling privilege escalation with high impact as per the CVSS data in the connected records. The documents do not provide a specific fix or patched version; expl...
8.8CVSS8.6AI score0.02217EPSS
SaveExploits1References3Affected Software1
20