Improper Authorization in Edgeline Infrastructure Manager - CVE-2021-29203
Published: May 4, 2021
Vulnerability identifier: #VU52837
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-29203
CWE-ID: CWE-285
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass authorization checks.
The vulnerability exists due to insufficient authorization checks. A remote attacker can reset the password for the Administrator account and login to the web application.
Affected software
Edgeline Infrastructure Manager
Edgeline Infrastructure Management
Edgeline Infrastructure Management
How to mitigate CVE-2021-29203
Install update from vendor's website.
Edgeline Infrastructure Manager - update to 1.22
Edgeline Infrastructure Management - update to 1.23
Edgeline Infrastructure Management - update to 1.23