Skip to main content

Hr Portal CVE-2021-22853

MEDIUM
Improper Access Control (CWE-284)
2021-02-17 twcert@cert.org.tw
Information Disclosure Authentication Bypass Hr Portal
5.4
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.4 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
Low

Lifecycle Timeline

1
CVE Published
Feb 17, 2021 - 14:15 nvd
MEDIUM 5.4

DescriptionNVD

The HR Portal of Soar Cloud System fails to manage access control. While obtaining user ID, remote attackers can access sensitive data via a specific data packet, such as user’s login information, further causing the login function not to work.

AnalysisAI

The HR Portal of Soar Cloud System fails to manage access control. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-284. The HR Portal of Soar Cloud System fails to manage access control. While obtaining user ID, remote attackers can access sensitive data via a specific data packet, such as user’s login information, further causing the login function not to work. Affected products include: Hr Portal Project Hr Portal.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Hr Portal

View all
CVE-2019-10257 HIGH POC
7.5 Jun 19

Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Rated high severity (CVSS 7.5), this vulnerability is
CVE-2025-48780 CRITICAL
9.8 Jun 06

Critical remote code execution vulnerability in Soar Cloud HRD Human Resource Management System (versions through 7.3.20
CVE-2025-48782 CRITICAL
9.8 Jun 06

Critical remote code execution vulnerability in Soar Cloud HRD Human Resource Management System versions up to 7.3.2025.
CVE-2021-22855 CRITICAL
9.8 Feb 17

The specific function of HR Portal of Soar Cloud System accepts any type of object to be deserialized. Rated critical se
CVE-2023-34357 HIGH
7.8 Sep 07

Soar Cloud Ltd. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
CVE-2025-5192 HIGH
7.5 Jun 06

Missing authentication vulnerability in Soar Cloud HRD Human Resource Management System versions up to 7.3.2025.0408 tha
CVE-2025-48781 HIGH
7.5 Jun 06

A remote code execution vulnerability in the download file function of Soar Cloud HRD Human Resource Management System (
CVE-2025-48783 HIGH
7.5 Jun 06

CVE-2025-48783 is an external control of file name or path vulnerability (CWE-73) in the delete file function of Soar Cl
CVE-2025-48784 HIGH
7.5 Jun 06

Missing authorization vulnerability in Soar Cloud HRD Human Resource Management System versions up to 7.3.2025.0408 that
CVE-2021-22854 HIGH
7.5 Feb 17

The HR Portal of Soar Cloud System fails to filter specific parameters. Rated high severity (CVSS 7.5), this vulnerabili

Same weakness CWE-284 – Improper Access Control

View all
CVE-2012-4681 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2012-5076 CRITICAL POC
9.8
CVE-2014-3120 HIGH POC
8.1
CVE-2013-2423 LOW POC
3.7
CVE-2016-3427 CRITICAL
9.8
CVE-2025-12480 CRITICAL POC
9.1

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2021-22853 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy