CVE-2020-13421

OpenIAM before 4.2.0.3 has Incorrect Access Control for the Create User, Modify User Permissions, and Password Reset actions.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 54%
VendorProductVersion
openiamopeniam
𝑥
< 4.2.0.3
𝑥
= Vulnerable software versions
References
https://cwe.mitre.org/data/definitions/284.html
https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md
https://cwe.mitre.org/data/definitions/284.html
https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md