Security Advisory

CVE-2021-37213

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-08-09 09:15:28

Last updated 2024-09-17 00:26:41

Assigner twcert

CVSS score 4.3

State PUBLISHED

Description

The check-in record page of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID and date in specific parameters to access particular employee’s check-in record.

← Browse all CVEs View on cve.org ↗