EUVD-2021-26508

Malware in sbrugna...

CVE-2021-3165

SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the //CampaignManager/users URI...

Code injection

SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the //CampaignManager/users URI...

PT-2021-19462

Name of the Vulnerable Software and Affected Versions SmartAgent version 3.1.0 Description The issue allows a ViewOnly attacker to create a SuperUser account via the "//CampaignManager/users" API endpoint. This enables the attacker to elevate their privileges. Recommendations For SmartAgent versi...

CVE-2021-3165: Incorrect Permission Assignment for Critical Resource

SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the //CampaignManager/users URI...