Description
In SapphireIMS 4097_1, a guest user can create a local administrator account on any system that has SapphireIMS installed, because of an Insecure Direct Object Reference (IDOR) in the local user creation function.
Unscored
CVE-2017-16630
EUVD-2017-7817GHSA-x7rr-wv6r-f745
In SapphireIMS 4097_1, a guest user can create a local administrator account on any system that has SapphireIMS installed, because of an In…
Published Aug 11, 2021 · Updated Aug 5, 2024 · Assigned by mitre