PT-2021-23540 · Unknown · Topease Platform

Published 2021-11-30 · Updated 2022-08-09 · CVE-2021-42116

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions TopEase Platform versions prior to 7.1.28

Description The issue allows an authenticated remote attacker to bypass access controls and view sensitive components, such as the Shape Editor and Settings, which are intended for higher-privileged users. This can be achieved by identifying these components in the front-end source code or through other means.

Recommendations For versions prior to 7.1.28, update to version 7.1.28 or later to resolve the issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2021-42116

Affected Products

Topease Platform

References · 3

• https://confluence.topease.ch/confluence/display/DOC/Release+Notes · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-42116 · Security Note
• https://osv.dev/vulnerability/CVE-2021-42116 · Vendor Advisory