CVE-2021-38696 - SoftVibe SARABAN for INFOMA 1.1 has Incorrect Access Control vulnerability, that allows attackers to access signature files on the application without any authentication

Back Back to CVE browser

HIGH

SoftVibe SARABAN for INFOMA 1.1 has Incorrect Access Control vulnerability, that allows attackers to access signature files on the application without any authentication

Published Jan 18, 2022

7.5

HIGH

CVSS 3.1

EPSS 1.68%

Description

SoftVibe SARABAN for INFOMA 1.1 has Incorrect Access Control vulnerability, that allows attackers to access signature files on the application without any authentication.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://www.infoma.net/index.php/saraban/
x_refsource_MISCProduct
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-25135
Advisory
https://orangeo.tech/post/2021/12/24/First-CVEs.html
x_refsource_MISCExploitThird Party AdvisoryURL Repurposed
https://play.google.com/store/apps/details?id=th.co.softvibe.saraban&hl=en&gl=US
x_refsource_MISCProduct
https://sawatdee.github.io/post/2021/12/24/First-CVEs.html
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
http://www.infoma.net/index.php/saraban/		x_refsource_MISCProduct
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-25135		Advisory
https://orangeo.tech/post/2021/12/24/First-CVEs.html		x_refsource_MISCExploitThird Party AdvisoryURL Repurposed
https://play.google.com/store/apps/details?id=th.co.softvibe.saraban&hl=en&gl=US		x_refsource_MISCProduct
https://sawatdee.github.io/post/2021/12/24/First-CVEs.html		x_refsource_MISCExploitThird Party Advisory