1. Home
  2. CVE Database
  3. CVE-2021-23173
LOW · 2.6

CVE-2021-23173

The affected product is vulnerable to an improper access control, which may allow an authenticated user to gain unauthorized access to sensitive data.

Vulnerability Description

The affected product is vulnerable to an improper access control, which may allow an authenticated user to gain unauthorized access to sensitive data.

CVSS Score

2.6

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
PhilipsEngage< 6.2.2

Related Weaknesses (CWE)

CWE-284

References

FAQ

What is CVE-2021-23173?

CVE-2021-23173 is a vulnerability with a CVSS score of 2.6 (LOW). The affected product is vulnerable to an improper access control, which may allow an authenticated user to gain unauthorized access to sensitive data.

How severe is CVE-2021-23173?

CVE-2021-23173 has been rated LOW with a CVSS base score of 2.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-23173?

Check the references section above for vendor advisories and patch information. Affected products include: Philips Engage.