Unscored CVE-2021-3380 EUVD-2021-26710GHSA-r62c-gw4m-r5qj

Insecure direct object reference (IDOR) vulnerability in ICREM H8 SSRMS allows attackers to disclose sensitive information via the Print In…

Published Nov 10, 2021 · Updated Jul 9, 2026 · Assigned by mitre

Description

Insecure direct object reference (IDOR) vulnerability in ICREM H8 SSRMS allows attackers to disclose sensitive information via the Print Invoice Functionality.

References

http://www.height8tech.com/carrier-grade-OSS-BSS.php
https://www.exploit-db.com/exploits/49508