Description
In SapphireIMS 4097_1, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference (IDOR) in the "Account Password Reset" functionality.
Unscored
CVE-2017-16631
EUVD-2017-7818GHSA-vgv5-w2x4-8qf2
In SapphireIMS 4097_1, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Referen…
Published Aug 11, 2021 · Updated Aug 5, 2024 · Assigned by mitre