PT-2021-23337 · Tad Honor · Tad Honor

Hsuan · Published 2021-10-08 · Updated 2023-07-18 · CVE-2021-41564

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Tad Honor (affected versions not specified)

Description The Tad Honor viewing book list function is vulnerable to authorization bypass. This allows remote attackers to use special parameters to delete articles arbitrarily without logging in.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

CVE-2021-41564

Affected Products

Tad Honor

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-41564 · Security Note
• https://osv.dev/vulnerability/CVE-2021-41564 · Vendor Advisory
• https://twcert.org.tw/tw/cp-132-5168-52304-1.html · Note
• https://t.me/cibsecurity/30254 · Telegram Post