← CVE Intelligence

CVE-2021-42331

ShinHer Information Co., LTD. ShinHer StudyOnline System - Improper Authorization-2 PUBLISHED

Description (CNA)

The “Study Edit” function of ShinHer StudyOnline System does not perform permission control. After logging in with user’s privilege, remote attackers can access and edit other users’ tutorial schedule by crafting URL parameters.

Affected (CNA)

Vendor / productVersions
ShinHer Information Co., LTD. / ShinHer StudyOnline Systemaffected unspecified through 2021

CWE

CWE-285

References

ADP enrichment

CVE

No English description supplied.