CVE-2021-29396

Katalog CVE

CVSS 9.8 · Critical EPSS 1,7%

Kerentanan Incorrect Permission Assignment for Critical Resource pada globalnorthstar northstar club management. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Systemic Insecure Permissions in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to use various functionalities without authentication.

Rincian

Terbit di NVD

4 Februari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-732: Incorrect Permission Assignment for Critical Resource

EPSS (30 hari)

1,7% peluang dieksploitasi; lebih tinggi dari 76,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://Ardent-Security.com advisory pihak ketiga
• https://ardent-security.com/en/advisory/asa-2021-04/ advisory pihak ketiga