CVE-2021-25991 — ifme - Improper Access Control leads to admin deactivation

Description (CNA)

In Ifme, versions v5.0.0 to v7.32 are vulnerable against an improper access control, which makes it possible for admins to ban themselves leading to their deactivation from Ifme account and complete loss of admin access to Ifme.

Affected (CNA)

Vendor / product	Versions
ifmeorg / ifme	affected v5.0.0 before unspecified; affected unspecified through v7.32

CWE

CWE-284

References

https://github.com/ifmeorg/ifme/commit/d1f570c458d41667df801fc9c40a18b181a2d923
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25991

ADP enrichment

CVE

No English description supplied.

https://github.com/ifmeorg/ifme/commit/d1f570c458d41667df801fc9c40a18b181a2d923
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25991

CISA-ADP

No English description supplied.

No references supplied.