CVE-2021-47701 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

OpenBMCS 2.4 allows an attacker to escalate privileges from a read user to an admin user by manipulating permissions and exploiting a vulnerability in the updat…
High CVSS: 8.7

CVE-2021-47701

OpenBMCS 2.4 allows an attacker to escalate privileges from a read user to an admin user by manipulating permissions and exploiting a vulnerability in the update_user_permissions.php script. Attackers can submit a malicious HTTP POST request to PHP scripts in '/plugins/useradmin/' directory.
Vendor
Openbmcs
Product
Openbmcs
CWE
CWE-862
Yayın Tarihi
2025-12-09 21:15:47
Güncelleme
2025-12-17 14:14:10
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-862 Openbmcs HIGH Openbmcs 2025

Referanslar

https://www.exploit-db.com/exploits/50669 https://www.vulncheck.com/advisories/openbmcs-user-management-privilege-escalation https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5693.php