CVE-2021-45347

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use any password.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published: Feb 14, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-453487.5An Arbitrary File Deletion vulnerability exists in SourceCodester Attendance Management System v1.0 via the csv parameter in admin/pageUploa CVE-2021-453576.1Cross Site Scripting (XSS) vulnerability exists in Piwigo 12.x via the pwg_activity function in include/functions.inc.php.CVE-2021-453649.8A Code Execution vulnerability exists in Statamic Version through 3.2.26 via SettingsController.php. NOTE: the vendor indicates that there w CVE-2021-453798.8Glewlwyd 2.0.0, fixed in 2.6.1 is affected by an incorrect access control vulnerability. One user can attempt to log in as another user with CVE-2021-453806.1AppCMS 2.0.101 has a XSS injection vulnerability in \templates\m\inc_head.php CVE-2021-453829.8A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-CVE-2021-453856.5A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 (2021-12-06) in bmp_load(). When the size information in metadata of the bm CVE-2021-453865.5tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv6() at tree.c CVE-2021-453875.5tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv4() at tree.c.CVE-2021-453899.8A flaw was found with the JWT token. A self-signed JWT token could be injected into the update manager and bypass the authentication process CVE-2021-453917.5A Buffer Overflow vulnerability exists in Tenda Router AX12 V22.03.01.21_CN in the sub_422CE4 function in the goform/setIPv6Status binary fi CVE-2021-453927.5A Buffer Overflow vulnerability exists in Tenda Router AX12 V22.03.01.21_CN in the sub_422CE4 function in page /goform/setIPv6Status via the