CVE-2021-43359

Sunnet eHRD has broken access control vulnerability, which allows a remote attacker to access account management page after being authenticated as a general user, then perform privilege escalation to execute arbitrary code and control the system or interrupt services.

Score

CVSS 3.1 8.8 High

Status

Modified - twcert@cert.org.tw

Published

2021-12-01

Last modified

2024-09-16

Weaknesses

CWE-732

Affected products

• Ehrd (Sun)
• Ehrd (Sunnet)

References

• https://www.twcert.org.tw/tw/cp-132-5354-0aac0-1.html