controller/org.controller/org.controller.js in the CVE Services API 1.1.1 before 5c50baf3bda28133a3bc90b854765a64fb538304 allows an organizational administrator to transfer a user account to an arbitrary new organization, and thereby achieve unintended access within the context of that new organization.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2022-01-26T17:48:15
Updated: 2024-08-04T05:10:35.184Z
Reserved: 2022-01-26T00:00:00
Link: CVE-2021-46561
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-01-26T18:15:08.040
Modified: 2024-11-21T06:34:19.910
Link: CVE-2021-46561
Redhat
No data.