CVE-2021-40616: Medium severity thinkcmf vulnerability
thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user management group permissions. The use condition is that the background user management group authority is required.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-40616?
CVE-2021-40616 is a vulnerability in thinkcmf v5.1.7 that allows an unauthorized attacker to modify the password of the administrator account with id 1 through the background user management group permissions.
How severe is CVE-2021-40616?
CVE-2021-40616 has a severity rating of 6.5, which is considered medium.
How does CVE-2021-40616 affect thinkcmf?
CVE-2021-40616 affects thinkcmf v5.1.7. Any other versions are not affected.
What is the CWE of CVE-2021-40616?
CVE-2021-40616 has a CWE (Common Weakness Enumeration) of 425.
Is there a fix available for CVE-2021-40616?
At the moment, there is no known fix or patch available for CVE-2021-40616. It is recommended to monitor the vendor's website for updates.