1. Home
  2. CVE Database
  3. CVE-2021-37214
HIGH · 8.8

CVE-2021-37214

The employee management page of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID in sp...

Vulnerability Description

The employee management page of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID in specific parameters to arbitrary access employee's data, modify it, and then obtain administrator privilege and execute arbitrary command.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
LarvataFlygo< 1.91.1

Related Weaknesses (CWE)

CWE-639CWE-706

References

FAQ

What is CVE-2021-37214?

CVE-2021-37214 is a vulnerability with a CVSS score of 8.8 (HIGH). The employee management page of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID in sp...

How severe is CVE-2021-37214?

CVE-2021-37214 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-37214?

Check the references section above for vendor advisories and patch information. Affected products include: Larvata Flygo.