CVE-2021-3380

MediumCVSS 6.5

Published: 10/11/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.09%

61th percentile - higher than 61% of all known CVEs

Summary

An IDOR vulnerability in ICREM H8 SSRMS allows unauthorized access to sensitive information via the Print Invoice Functionality. Attackers can exploit this flaw to read data without proper permissions.

Risk Assessment

The risk involves potential leakage of confidential financial and personal customer data, which could lead to reputational damage and legal consequences for the organization.

Recommendation

Implement access control mechanisms for the Print Invoice Functionality immediately, such as verifying user permissions before displaying data.

Original NVD description (English source)

Insecure direct object reference (IDOR) vulnerability in ICREM H8 SSRMS allows attackers to disclose sensitive information via the Print Invoice Functionality.