cvelist/2021/42xxx/CVE-2021-42332.json

{
    "CVE_data_meta": {
        "AKA": "TWCERT/CC",
        "ASSIGNER": "cve@cert.org.tw",
        "DATE_PUBLIC": "2021-10-15T11:38:00.000Z",
        "ID": "CVE-2021-42332",
        "STATE": "PUBLIC",
        "TITLE": "ShinHer Information Co., LTD. ShinHer StudyOnline System - Improper Authorization-3"
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "product": {
                        "product_data": [
                            {
                                "product_name": "ShinHer StudyOnline System",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_affected": "<=",
                                            "version_value": "2021"
                                        }
                                    ]
                                }
                            }
                        ]
                    },
                    "vendor_name": "ShinHer Information Co., LTD."
                }
            ]
        }
    },
    "data_format": "MITRE",
    "data_type": "CVE",
    "data_version": "4.0",
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "The \u201cList View\u201d function of ShinHer StudyOnline System is not under authority control. After logging in with user\u2019s privilege, remote attackers can access the content of other users\u2019 message boards by crafting URL parameters."
            }
        ]
    },
    "generator": {
        "engine": "Vulnogram 0.0.9"
    },
    "impact": {
        "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
        }
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "CWE-285 Improper Authorization"
                    }
                ]
            }
        ]
    },
    "references": {
        "reference_data": [
            {
                "refsource": "MISC",
                "url": "https://www.twcert.org.tw/tw/cp-132-5202-49681-1.html",
                "name": "https://www.twcert.org.tw/tw/cp-132-5202-49681-1.html"
            }
        ]
    },
    "solution": [
        {
            "lang": "eng",
            "value": "Update ShinHer StudyOnline System to version v2021.08.20.01"
        }
    ],
    "source": {
        "advisory": "TVN-202110004",
        "discovery": "EXTERNAL"
    }
}