Vulnerabilities > CVE-2021-36124 - Missing Authorization vulnerability in Echobh Sharecare 8.15.5

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
echobh
CWE-862
critical

Summary

An issue was discovered in Echo ShareCare 8.15.5. It does not perform authentication or authorization checks when accessing a subset of sensitive resources, leading to the ability for unauthenticated users to access pages that are vulnerable to attacks such as SQL injection.

Vulnerable Configurations

Part Description Count
Application
Echobh
1

Common Weakness Enumeration (CWE)