Security Advisory

CVE-2021-38616

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-09-07 11:21:28

Last updated 2025-05-30 16:01:41

Assigner mitre

State PUBLISHED

Description

In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/{user-guid}/ user edition endpoint could permit any logged-in user to increase their own permissions via a user_permissions array in a PATCH request. A guest user could modify other users profiles and much more.

← Browse all CVEs View on cve.org ↗