CVE-2021-20874

2021-12-2406:30:29

jpcert

www.cve.org

0.002 Low

EPSS

Percentile

62.0%

JSON

Incorrect permission assignment for critical resource vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier allows a remote unauthenticated attacker to access arbitrary files on the server and obtain sensitive information via unspecified vectors.

CNA Affected

[
  {
    "product": "GroupSession Free edition, GroupSession byCloud, GroupSession ZION",
    "vendor": "Japan Total System Co.,Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier"
      }
    ]
  }
]

References

groupsession.jp/info/info-news/security20211220

jvn.jp/en/jp/JVN79798166/index.html

0.002 Low

EPSS

Percentile

62.0%

JSON

Related for CVELIST:CVE-2021-20874