Vulnerabilities > CVE-2021-31928 - Unspecified vulnerability in Annexcloud Loyalty Experience Platform

047910
CVSS 9.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
SINGLE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
annexcloud
critical

Summary

Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to escalate privileges to superadministrator. It was fixed in v2021.1.0.2.

Vulnerable Configurations

Part Description Count
Application
Annexcloud
1