CVE-2017-16630

In SapphireIMS 4097_1, a guest user can create a local administrator account on any system that has SapphireIMS installed, because of an Insecure Direct Object Reference (IDOR) in the local user creation function.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2021-08-11

Last modified

2024-08-05

Weaknesses

CWE-732

Affected products

• Sapphireims (Sapphireims)

References

• https://vuln.shellcoder.party/2020/07/18/cve-2017-16630-sapphireims-idor-based-privilege-elevation/
• https://vuln.shellcoder.party/tags/sapphireims/