Unscored CVE-2021-31927 EUVD-2021-18800GHSA-3r8c-rqqr-c7h4

An Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated at…

Published Jun 10, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

An Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify any existing user, including users assigned to different environments and clients. It was fixed in v2021.1.0.2.

References

https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md
https://www.annexcloud.com/