CVE-2021-43359: Sunnet eHRD - Broken Access Control
Sunnet eHRD has broken access control vulnerability, which allows a remote attacker to access account management page after being authenticated as a general user, then perform privilege escalation to execute arbitrary code and control the system or interrupt services.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2021-43359?
CVE-2021-43359 has a high severity rating due to the potential for privilege escalation and arbitrary code execution.
How do I fix CVE-2021-43359?
To remediate CVE-2021-43359, it is recommended to update to the latest version of Sun eHRD that addresses this vulnerability.
What types of systems are affected by CVE-2021-43359?
CVE-2021-43359 affects Sun eHRD versions 8 and 9.
What can an attacker do by exploiting CVE-2021-43359?
An attacker exploiting CVE-2021-43359 can access the account management page and execute arbitrary code, potentially taking control of the system.
Is CVE-2021-43359 exploited locally or remotely?
CVE-2021-43359 can be exploited remotely after initial user authentication.