AMP Application Deployment Service in CubeCoders AMP 2.1.x before 2.1.1.2 allows a remote, authenticated user to open ports in the local system firewall by crafting an HTTP(S) request directly to the applicable API endpoint (despite not having permission to make changes to the system's network configuration).
References
Link | Resource |
---|---|
https://github.com/CubeCoders/AMP/issues/443 | Exploit Third Party Advisory |
Configurations
History
No history.
Information
Published : 2021-04-30 20:15
Updated : 2024-02-28 18:28
NVD link : CVE-2021-31926
Mitre link : CVE-2021-31926
CVE.ORG link : CVE-2021-31926
JSON object : View
Products Affected
cubecoders
- amp
CWE
CWE-863
Incorrect Authorization