critical9.8
CVE-2021-28171
The Vangene deltaFlow E-platform does not take properly protective measures.
Impact
The Vangene deltaFlow E-platform does not take properly protective measures. Attackers can obtain privileged permissions remotely by tampering with users’ data in the Cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Deltaflow Project | Deltaflow | from 4.0 before 7.7 |