cvelist/2021/42xxx/CVE-2021-42330.json

{
    "CVE_data_meta": {
        "AKA": "TWCERT/CC",
        "ASSIGNER": "cve@cert.org.tw",
        "DATE_PUBLIC": "2021-10-15T11:38:00.000Z",
        "ID": "CVE-2021-42330",
        "STATE": "PUBLIC",
        "TITLE": "ShinHer Information Co., LTD. ShinHer StudyOnline System - Improper Authorization-1"
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "product": {
                        "product_data": [
                            {
                                "product_name": "ShinHer StudyOnline System",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_affected": "<=",
                                            "version_value": "2021"
                                        }
                                    ]
                                }
                            }
                        ]
                    },
                    "vendor_name": "ShinHer Information Co., LTD."
                }
            ]
        }
    },
    "data_format": "MITRE",
    "data_type": "CVE",
    "data_version": "4.0",
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "The \u201cTeacher Edit\u201d function of ShinHer StudyOnline System does not perform authority control. After logging in with user\u2019s privilege, remote attackers can access and edit other users\u2019 credential and personal information by crafting URL parameters."
            }
        ]
    },
    "generator": {
        "engine": "Vulnogram 0.0.9"
    },
    "impact": {
        "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
        }
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "CWE-285 Improper Authorization"
                    }
                ]
            }
        ]
    },
    "references": {
        "reference_data": [
            {
                "refsource": "MISC",
                "url": "https://www.twcert.org.tw/tw/cp-132-5200-3d3ca-1.html",
                "name": "https://www.twcert.org.tw/tw/cp-132-5200-3d3ca-1.html"
            }
        ]
    },
    "solution": [
        {
            "lang": "eng",
            "value": "Update ShinHer StudyOnline System to version v2021.08.20.01"
        }
    ],
    "source": {
        "advisory": "TVN-202110002",
        "discovery": "EXTERNAL"
    }
}