high7.5
CVE-2021-38095
The REST API in Planview Spigit 4.5.3 allows remote unauthenticated attackers to query sensitive user accounts data, as demonstrated by an api/v1/users/1 reque…
Impact
The REST API in Planview Spigit 4.5.3 allows remote unauthenticated attackers to query sensitive user accounts data, as demonstrated by an api/v1/users/1 request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Planview | Spigit | Version 4.5.3 |