CVE-2021-45478: IDOR in Yordam Library Automation System

Published Mar 2, 2023

Updated

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users.

This issue affects Library Automation System: before 19.2.

Other sources

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users.This issue affects Library Automation System: before 19.2.

Affected Software

1 affected component

Yordam Library Automation System<19.2

Remediation

Information

Update the software version to >=19.2

Event History

Mar 2, 2023

CVE Published

via MITRE·08:26 AM

Data Sourced

via MITRE·08:26 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2021-45478.

What is the severity of CVE-2021-45478?

The severity of CVE-2021-45478 is medium with a CVSS score of 6.5.

What is the affected software for CVE-2021-45478?

The affected software for CVE-2021-45478 is Yordam Library Automation System before version 19.2.

How does the vulnerability manifest in the affected software?

The vulnerability manifests as an improper handling of parameters in Bordam Information Technologies Library Automation System, allowing the collection of data as provided by users.

Is there a fix available for CVE-2021-45478?

Yes, the fix for CVE-2021-45478 is to update Yordam Library Automation System to version 19.2 or later.