CVE-2021-31929

The vulnerability CVE-2021-31929 affects Annex Cloud’s Loyalty Experience Platform before version 2021.1.0.1. An authenticated attacker can modify loyalty campaigns and settings (including fraud prevention, coupon groups, email templates, and referrals), indicating insufficient authorization cont...

CVE-2021-31927

CVE-2021-31927 describes an Insecure Direct Object Reference (IDOR) in Annex Cloud Loyalty Experience Platform versions earlier than 2021.1.0.1, allowing any authenticated user to modify existing users across environments/clients. The issue is fixed in 2021.1.0.2. Affected component: Annex Cloud ...

CVE-2021-31928

CVE-2021-31928 affects Annex Cloud Loyalty Experience Platform versions prior to 2021.1.0.1. An authenticated attacker can escalate privileges to superadministrator. The issue was fixed in v2021.1.0.2. The CVSS metrics listed (NVD) indicate high impact with full confidentiality, integrity, and av...