Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2021-22860

EIC e-document system - Broken Authentication

Description

EIC e-document system does not perform completed identity verification for sorting and filtering personnel data. The vulnerability allows remote attacker to obtain users’ credential information without logging in the system, and further acquire the privileged permissions and execute arbitrary commends.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Excellent Infotek Corporation e-document system

  • 0 3.0.2affected
  • 0 2.9affected

References