CVE-2021-36389
Assigner: mitre
Published: 2021-10-14T18:27:27
State: PUBLISHED
descriptions: value: In Yellowfin before 9.6.1 it is possible to enumerate and download uploaded images through an Insecure Direct Object Reference vulnerability exploitable by sending a specially crafted HTTP GET request to the page "MIImage.i4".
affected: vendor: n/a
product: n/a
versions: version: n/a
status: affected
problemTypes: descriptions: type: text
description: n/a