SoftVibe SARABAN for INFOMA 1.1 has Incorrect Access Control vulnerability, that allows attackers to access signature files on the application without any authentication.
References
| Link | Resource |
|---|---|
| http://www.infoma.net/index.php/saraban/ | Product |
| https://orangeo.tech/post/2021/12/24/First-CVEs.html | Exploit Third Party Advisory URL Repurposed |
| https://play.google.com/store/apps/details?id=th.co.softvibe.saraban&hl=en&gl=US | Product |
| https://sawatdee.github.io/post/2021/12/24/First-CVEs.html | Exploit Third Party Advisory |
| http://www.infoma.net/index.php/saraban/ | Product |
| https://orangeo.tech/post/2021/12/24/First-CVEs.html | Exploit Third Party Advisory URL Repurposed |
| https://play.google.com/store/apps/details?id=th.co.softvibe.saraban&hl=en&gl=US | Product |
| https://sawatdee.github.io/post/2021/12/24/First-CVEs.html | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 06:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.infoma.net/index.php/saraban/ - Product | |
| References | () https://orangeo.tech/post/2021/12/24/First-CVEs.html - Exploit, Third Party Advisory, URL Repurposed | |
| References | () https://play.google.com/store/apps/details?id=th.co.softvibe.saraban&hl=en&gl=US - Product | |
| References | () https://sawatdee.github.io/post/2021/12/24/First-CVEs.html - Exploit, Third Party Advisory |
14 Feb 2024, 01:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://orangeo.tech/post/2021/12/24/First-CVEs.html - Exploit, Third Party Advisory, URL Repurposed |
Information
Published : 2022-01-18 15:15
Updated : 2024-11-21 06:17
NVD link : CVE-2021-38696
Mitre link : CVE-2021-38696
CVE.ORG link : CVE-2021-38696
JSON object : View
Products Affected
softvibe
- saraban
CWE