← CVE Intelligence

CVE-2021-43359

Sunnet eHRD - Broken Access Control PUBLISHED

Description (CNA)

Sunnet eHRD has broken access control vulnerability, which allows a remote attacker to access account management page after being authenticated as a general user, then perform privilege escalation to execute arbitrary code and control the system or interrupt services.

Affected (CNA)

Vendor / productVersions
Sunnet / eHRDaffected 8; affected 9

CWE

CWE-732

References

ADP enrichment

CVE

No English description supplied.