VULNERABILITY INTELLIGENCE

CVE-2021-25991

CVSS score5.7 MEDIUM

EPSS probability0.83%

CISA KEVNot currently listed

Published2021-12-29

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Description

In Ifme, versions v5.0.0 to v7.32 are vulnerable against an improper access control, which makes it possible for admins to ban themselves leading to their deactivation from Ifme account and complete loss of admin access to Ifme.

Weakness classification

vulnerabilitylab@mend.io: CWE-284
nvd@nist.gov: NVD-CWE-Other

Primary references

vulnerabilitylab@mend.io — Patch, Third Party Advisory
vulnerabilitylab@mend.io — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory