Vulnerabilities > CVE-2021-37270 - Missing Authorization vulnerability in S-Cms CMS Enterprise Website Construction System 5.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
There is an unauthorized access vulnerability in the CMS Enterprise Website Construction System 5.0. Attackers can use this vulnerability to directly access the specified background path without logging in to the background to obtain the background administrator authority.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |