CVE-2021-32503

Summary

Unauthenticated users can access sensitive web URLs through GET request, which should be restricted to maintenance users only. A malicious attacker could use this sensitive information’s to launch further attacks on the system.

Affected Software

VendorProductVersion RangeStatus
n/aSICK FTMgAll versions before 2.8affected

Weaknesses

  • CWE-862: CWE-862

ADP Enrichment

CVE Program Container

Additional References

References