CVE-2021-21471
- State
- Published
- Severity
- 6.5 Medium
- Published
- Jan 12, 2021
- Updated
- Aug 3, 2024
- Reserved
- Dec 30, 2020
Description
In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intended to be used by the user. This could impact the integrity of the application.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 6.5 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N | sap |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
CLA-AssistantSAP SE |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.