CVE-2021-27235

2021-02-1603:43:36

mitre

www.cve.org

mutare voice

evm

admin portal

unauthorized access

database export

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

28.4%

JSON

An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. On the admin portal of the web application, there is a functionality at diagzip.asp that allows anyone to export tables of a database.

References

www.mutare.com/security-adv-mutare-2021-003-mutare-voice/