Skip to content
Sign in
Not rated

CVE-2021-40066 The access controls on the Mobility read-only API improperly validate user access permissions

Description

The access controls on the Mobility read-only API improperly validate user access permissions. Attackers with both network access to the API and valid credentials can read data from it; regardless of access control group membership settings. This vulnerability is fixed in Mobility v11.76 and Mobility v12.14.

Affected products and versions

Product Affected versions Fixed in
NetMotion Mobility Versions not published

Other CVEs of NetMotion Mobility

The 2 CVEs of NetMotion Mobility →
CVE-2021-40067 The access controls on the Mobility read-write API improperly validate user access permissions; this API is disabled… Not rated
Track this CVE