Vulnerabilities > CVE-2021-36124 - Missing Authorization vulnerability in Echobh Sharecare 8.15.5
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
An issue was discovered in Echo ShareCare 8.15.5. It does not perform authentication or authorization checks when accessing a subset of sensitive resources, leading to the ability for unauthenticated users to access pages that are vulnerable to attacks such as SQL injection.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |