Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2021-25991

ifme - Improper Access Control leads to admin deactivation

Description

In Ifme, versions v5.0.0 to v7.32 are vulnerable against an improper access control, which makes it possible for admins to ban themselves leading to their deactivation from Ifme account and complete loss of admin access to Ifme.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ifmeorg ifme

  • v5.0.0 to < unspecifiedaffected
  • unspecified to ≤ v7.32affected

References