Vulnerabilities > CVE-2021-36124 - Missing Authorization vulnerability in Echobh Sharecare 8.15.5

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
echobh
CWE-862

Summary

An issue was discovered in Echo ShareCare 8.15.5. It does not perform authentication or authorization checks when accessing a subset of sensitive resources, leading to the ability for unauthenticated users to access pages that are vulnerable to attacks such as SQL injection.

Vulnerable Configurations

Part Description Count
Application
Echobh
1

Common Weakness Enumeration (CWE)