SapphireIMS 4097 1
Approved changes feed: RSS · Atom
cpe:2.3:a:sapphireims:sapphireims:4097_1:*:*:*:*:*:*:*part: a version: 4097_1 update: *
| Vendor | Sapphireims (d290e724-8706-53dd-89e4-17ab1fa9efc5) |
|---|---|
| Product | Sapphireims (f7ae3390-ee8a-50f0-8e7a-6cd716b95df2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-16632 |
vulnerable | 2026-06-08 05:09:00.667472 |
Details available
In SapphireIMS 4097_1, the password in the database is stored in Base64 format.
Published: 2021-08-11T20:11:26.000Z
Updated: 2024-08-05T20:27:04.240Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16631 |
vulnerable | 2026-06-08 05:09:00.667183 |
Details available
In SapphireIMS 4097_1, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference (IDOR) in the "Account Password Reset" functionality.
Published: 2021-08-11T20:10:30.000Z
Updated: 2024-08-05T20:27:04.263Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16630 |
vulnerable | 2026-06-08 05:09:00.666874 |
Details available
In SapphireIMS 4097_1, a guest user can create a local administrator account on any system that has SapphireIMS installed, because of an Insecure Direct Object Reference (IDOR) in the local user creation function.
Published: 2021-08-11T20:09:18.000Z
Updated: 2024-08-05T20:27:04.464Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16629 |
vulnerable | 2026-06-08 05:09:00.666467 |
Details available
In SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software from the errors it gives out for each type of user on the Login form. For "Incorrect User" - it gives an error "The application failed to identify the user. Please contact administrator for help." For "Correct User and Incorrect Password" - it gives an error "Authentication failed. Please login again."
Published: 2021-08-11T20:08:19.000Z
Updated: 2024-08-05T20:27:04.252Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.