Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2021-21471

In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intended to be used by the user. This could i

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intended to be used by the user. This could impact the integrity of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE CLA-Assistant

  • < 2.8.5affected

References