CVE-2021-29394 | BDVDB-2026-169151 Detail

Description#

Account Hijacking in /northstar/Admin/changePassword.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote authenticated users to change the password of any targeted user accounts via lack of proper authorization in the user-controlled "userID" parameter of the HTTP POST request.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://ardent-security.com
https://ardent-security.com/en/advisory/asa-2021-02/

Exploit#

No public exploit known

History#

Version 12022-02-04Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.