8 matches found
EUVD-2021-18802
Malware in sbrugna...
CVE-2021-31927
CVE-2021-31927 describes an Insecure Direct Object Reference (IDOR) in Annex Cloud Loyalty Experience Platform versions earlier than 2021.1.0.1, allowing any authenticated user to modify existing users across environments/clients. The issue is fixed in 2021.1.0.2. Affected component: Annex Cloud ...
PT-2021-19601
Name of the Vulnerable Software and Affected Versions: Annex Cloud Loyalty Experience Platform versions prior to 2021.1.0.2 Description: The issue is related to an Insecure Direct Object Reference IDOR that allows any authenticated attacker to modify existing users, including those assigned to...
PT-2021-19602
Name of the Vulnerable Software and Affected Versions: Annex Cloud Loyalty Experience Platform versions prior to 2021.1.0.2 Description: The issue allows any authenticated attacker to escalate privileges to superadministrator. Recommendations: For versions prior to 2021.1.0.2, update to version...
CVE-2021-31929: Incorrect Permission Assignment for Critical Resource
Annex Cloud Loyalty Experience Platform 2021.1.0.1 allows any authenticated attacker to modify loyalty campaigns and settings, such as fraud prevention, coupon groups, email templates, or referrals...
CVE-2021-31927: Authorization Bypass Through User-Controlled Key
An Insecure Direct Object Reference IDOR vulnerability in Annex Cloud Loyalty Experience Platform 2021.1.0.1 allows any authenticated attacker to modify any existing user, including users assigned to different environments and clients. It was fixed in v2021.1.0.2...
CVE-2021-31928: Undefined Security Weakness
Annex Cloud Loyalty Experience Platform 2021.1.0.1 allows any authenticated attacker to escalate privileges to superadministrator. It was fixed in v2021.1.0.2...
PT-2021-19603
Name of the Vulnerable Software and Affected Versions: Annex Cloud Loyalty Experience Platform versions prior to 2021.1.0.1 Description: The issue allows any authenticated attacker to modify loyalty campaigns and settings. This includes modifying fraud prevention, coupon groups, email templates, ...