Medium · 5.3 CVE-2021-41528 EUVD-2021-28547GHSA-9m9p-ggvx-5qpm

Improper authorization related to Import / Export interfaces on RISC Platform

Published Feb 7, 2025 · Updated Feb 7, 2025 · Assigned by flexera

Vendor: Flexera Software Product: RISC Platform

Description

An error when handling authorization related to the import / export interfaces on the RISC Platform prior to the saas-2021-12-29 release can potentially be exploited to access the import / export functionality with low privileges.

Affected products

Vendor	Product	Affected	Fixed
Flexera	RISC Platform	< saas-2021-12-29	saas-2021-12-29

References

https://community.flexera.com/s/feed/0D5PL00000Nwgg30AB vendor-advisory
https://medium.com/@amroot/cve-2021-41528-flexera-risc-networks-vulnerable-authorization-schema-3e980d59217a related