Skip to content
OpenAdvisories
High · 7.2 CVE-2021-40853 EUVD-2021-28009GHSA-g4wc-2gqq-5g7v

TCMAN GIM missing authorization vulnerability

Published Dec 17, 2021 · Updated Sep 17, 2024 · Assigned by INCIBE

Description

TCMAN GIM does not perform an authorization check when trying to access determined resources. A remote attacker could exploit this vulnerability to access URL that require privileges without having them. The exploitation of this vulnerability might allow a remote attacker to obtain sensible information.

Affected products

VendorProductAffectedFixed
TCMAN GIM 8.0, 11.0 —

References