2 matches found
CVE-2017-16631
In SapphireIMS 40971, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference IDOR in the "Account Password Reset" functionality...
6.5CVSS7AI score0.00648EPSS
SaveExploits0References1
CVE-2017-16631
In SapphireIMS 40971, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference IDOR in the "Account Password Reset" functionality...
6.5CVSS5.5AI score0.00648EPSS
SaveExploits0References3
20