CVE-2021-3165

SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the //CampaignManager/users URI...

CVE-2021-3165

SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the //CampaignManager/users URI...

Code injection

SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the //CampaignManager/users URI...

CVE-2021-3165

SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the //CampaignManager/users URI...

CVE-2021-3165

CVE-2021-3165 affects SmartAgent 3.1.0. A ViewOnly attacker can escalate to a SuperUser by accessing the /#/CampaignManager/users URI, enabling privilege escalation with high impact as per the CVSS data in the connected records. The documents do not provide a specific fix or patched version; expl...

CVE-2021-3165: Incorrect Permission Assignment for Critical Resource

SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the //CampaignManager/users URI...

PT-2021-19462

Name of the Vulnerable Software and Affected Versions SmartAgent version 3.1.0 Description The issue allows a ViewOnly attacker to create a SuperUser account via the "//CampaignManager/users" API endpoint. This enables the attacker to elevate their privileges. Recommendations For SmartAgent versi...