Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2021-38417

VISAM VBASE Editor Improper Access Control

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

VISAM VBASE version 11.6.0.6 is vulnerable to improper access control via the web-remote endpoint, which may allow an unauthenticated user viewing access to folders and files in the directory listing.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VISAM VBASE Pro-RT/ Server-RT (Web Remote)

  • version 11.6.0.6affected

References