EUVD-2021-26670

Malware in sbrugna...

CVE-2021-3339

ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen...

CVE-2021-3339

ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen...

CVE-2021-3339

ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen...

Security feature bypass

ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen...

CVE-2021-3339

ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen...

CVE-2021-3339

ModernFlow prior to 1.3.00.208 has an access control weakness where web-page access is not constrained to members of a security group. The issue is demonstrated on the Search Screen and the Profile Screen. Several external entries (Red Hat, PRION, NVD, CVE) confirm the same description; no public...

4sight ModernFlow Authorization Issues Vulnerability

4sight ModernFlow is a mobile app from 4sight, Inc. that provides an app to easily manage business processes within an organization. An authorization issue vulnerability exists in ModernFlow. The vulnerability stems from the system not restricting web access to members of the security group as...