CVE-2021-38615 MEDIUM

CVE-2021-38615

Vendor N/A
Product n/a
Published September 7, 2021
Last update May 30, 2025
View on NVD All CVEs

CVSS base score

6.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AC:L/AV:N/A:L/C:L/I:L/PR:L/S:U/UI:N

What the vulnerability does

01Description

In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/sso/config/ SSO configuration endpoint allows any logged-in user (guest, standard, or admin) to view and modify information.

Key dates

02Disclosure timeline

September 7, 2021 CVE published
May 30, 2025 Record updated