Linux Distros Unpatched Vulnerability : CVE-2021-25954

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Dolibarr application, 2.8.1 to 13.0.4 don't restrict or incorrectly restricts access to a resource from an unauthorized actor. A low privileged attacker can...

CVE-2021-25954

creationtimestamp| type| source ---|---|--- 2021-08-09 20:37:09+00:00| seen| https://t.me/cibsecurity/27019...

CVE-2021-25954 Improper Access Control in “Dolibarr”

In “Dolibarr” application, 2.8.1 to 13.0.4 don’t restrict or incorrectly restricts access to a resource from an unauthorized actor. A low privileged attacker can modify the Private Note which only an administrator has rights to do, the affected field is at “/adherents/note.php?id=1” endpoint...

CVE-2021-25954

CVE-2021-25954 affects Dolibarr versions 2.8.1–13.0.4 and describes an improper access control where a low-privileged user can modify the Private Note via the /adherents/note.php?id=1 endpoint. The root cause is unrestricted or misrestricted access to a resource that should require higher privile...