Security Advisory

CVE-2021-37214

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-08-09 09:15:30

Last updated 2024-09-17 00:16:52

Assigner twcert

State PUBLISHED

Description

The employee management page of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID in specific parameters to arbitrary access employees data, modify it, and then obtain administrator privilege and execute arbitrary command.

← Browse all CVEs View on cve.org ↗