CVE-2021-3165

High

SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the /#/CampaignManager/users URI.

mitre·CWE-732·Published 2021-01-26

CVSS

8.8

EPSS

0.02

KEV

Exploits

cve.orgen

111 chars

SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the /#/CampaignManager/users URI.

NVDen

111 chars

SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the /#/CampaignManager/users URI.

NVDes

129 chars

SmartAgent versión 3.1.0, permite a un atacante ViewOnly crear una cuenta de SuperUser por medio del URI /#/CampaignManager/users

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.5	8.0	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P
3.1	Primary	NVD	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H