← CVE Intelligence

CVE-2021-43939

Elcomplus SmartPtt Improper Authorization PUBLISHED

Description (CNA)

Elcomplus SmartPTT is vulnerable when a low-authenticated user can access higher level administration authorization by issuing requests directly to the desired endpoints.

Affected (CNA)

Vendor / productVersions
Elcomplus / SmartPTTaffected 1.1

CWE

CWE-285

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.