critical9.8
CVE-2021-36124
An issue was discovered in Echo ShareCare 8.15.5.
Impact
An issue was discovered in Echo ShareCare 8.15.5. It does not perform authentication or authorization checks when accessing a subset of sensitive resources, leading to the ability for unauthenticated users to access pages that are vulnerable to attacks such as SQL injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Echobh | Sharecare | Version 8.15.5 |