← CVE Intelligence

CVE-2021-42332

ShinHer Information Co., LTD. ShinHer StudyOnline System - Improper Authorization-3 PUBLISHED

Description (CNA)

The “List View” function of ShinHer StudyOnline System is not under authority control. After logging in with user’s privilege, remote attackers can access the content of other users’ message boards by crafting URL parameters.

Affected (CNA)

Vendor / productVersions
ShinHer Information Co., LTD. / ShinHer StudyOnline Systemaffected unspecified through 2021

CWE

CWE-285

References

ADP enrichment

CVE

No English description supplied.