Lucene search

MitreCVE-2021-42671

HistoryNov 05, 2021 - 1:15 p.m.

CVE-2021-42671

2021-11-0513:15:09

CWE-425

mitre

web.nvd.nist.gov

access control

vulnerability

sourcecodester engineers online portal

php

nvd

cve-2021-42671

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.003

Percentile

69.6%

JSON

An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitoring_system/admin/uploads. An attacker can leverage this vulnerability in order to bypass access controls and access all the files uploaded to the web server without the need of authentication or authorization.

Affected configurations

Nvd

Node

engineers_online_portal_projectengineers_online_portalMatch-

VendorProductVersionCPE
engineers_online_portal_projectengineers_online_portal-cpe:2.3:a:engineers_online_portal_project:engineers_online_portal:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
engineers_online_portal_project	engineers_online_portal	-	cpe:2.3:a:engineers_online_portal_project:engineers_online_portal:-:::::::*

References

github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42671

github.com/TheHackingRabbi/CVE-2021-42671

www.sourcecodester.com/php/13115/engineers-online-portal-php.html

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.003

Percentile

69.6%

JSON

Related for CVE-2021-42671