CVE-2021-37394: High severity RPCMS RPCMS vulnerability
Published Jul 26, 2021
·Updated
In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration.
Affected Software
1 affected component
RPCMS RPCMS<=1.8
Event History
Jul 26, 2021
CVE Published
via MITRE·05:07 PM
Data Sourced
via MITRE·05:07 PM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-37394?
CVE-2021-37394 is classified as a high severity vulnerability due to its potential for unauthorized admin user registration.
2
How do I fix CVE-2021-37394?
To fix CVE-2021-37394, upgrade RPCMS to version 1.9 or later to mitigate the vulnerability.
3
What versions of RPCMS are affected by CVE-2021-37394?
RPCMS versions 1.8 and below are affected by CVE-2021-37394.
4
What does CVE-2021-37394 exploit?
CVE-2021-37394 exploits the API allowing attackers to change the 'role' variable to 'admin'.
5
Who is vulnerable to CVE-2021-37394?
Any user running RPCMS v1.8 or below is vulnerable to CVE-2021-37394.