CVE-2021-34369 - CVE House
Back to Database
Status published Medium CVE-2021-34369

portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers...

Vulnerability Description

portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensitive information via a modified contactSeqNumber value. NOTE: the vendor states "the information that is being queried is authorized for an authenticated user of that application, so we consider this not applicable.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-34369

Credits & Attribution

No credits recorded in the NVD database.

References

More from accela

View All →
CVE-2021-34370
Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE:...
Medium 6.1
CVE-2021-33904
In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode...
Medium 6.1
CVE-2016-5661
Accela Civic Platform Citizen Access portal relies on the client...
High 8.8
CVE-2016-5660
Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform...
Medium 6.1

Affected Vendor

Affected Software

civic platform
Vulnerable Versions:
0

Timeline

Official Publish: June 9th, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.