How severe is CVE-2021-40354?

This vulnerability has a severity rating of HIGH with a CVSS score of 7.1 out of 10.

What type of vulnerability is CVE-2021-40354?

This is classified as CWE-267, which is a common weakness in software security.

CVE-2021-40354 - HIGH Severity | CVSS 7.1

Vulnerability Description

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions < V13.1.0.5), Teamcenter V13.2 (All versions < 13.2.0.2). The "surrogate" functionality on the user profile of the application does not perform sufficient access control that could lead to an account takeover. Any profile on the application can perform this attack and access any other user assigned tasks via the "inbox/surrogate tasks".

Related Vulnerabilities

CVE-2021-44476

HIGH

CVSS:7.1(High)

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, including sensitive configuration file...

CWE-2672021

CVE-2023-28049

HIGH

CVSS:7.1(High)

Dell Command | Monitor, versions prior to 10.9, contain an arbitrary folder deletion vulnerability. A locally authenticated malicious user may exploit this vulnerability in order to perform a privileg...

CWE-2672023

CVE-2024-8539

HIGH

CVSS:7.1(High)

Improper authorization in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker to modify sensitive configuration files.

CWE-2672024

CVE-2019-10169

HIGH

CVSS:7.2(High)

A flaw was found in Keycloak’s user-managed access interface, where it would permit a script to be set in the UMA policy. This flaw allows an authenticated attacker with UMA permissions to configure a...

CWE-2672019

CVE-2019-10170

HIGH

CVSS:7.2(High)

A flaw was found in the Keycloak admin console, where the realm management interface permits a script to be set via the policy. This flaw allows an attacker with authenticated user and realm managemen...

CWE-2672019

CVE-2024-8631

HIGH

CVSS:7.2(High)

A privilege escalation issue has been discovered in GitLab EE affecting all versions starting from 16.6 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2. A user assigned the A...

CWE-2672024