CVE-2021-41554

ARCHIBUS Web Central 21.3.3.815 (a version from 2014) does not properly validate requests for access to data and functionality in these affected endpoints: /archibus/schema/ab-edit-users.axvw, /archibus/schema/ab-data-dictionary-table.axvw, /archibus/schema/ab-schema-add-field.axvw, /archibus/schema/ab-core/views/process-navigator/ab-my-user-profile.axvw. By not verifying the permissions for access to resources, it allows a potential attacker to view pages that are not allowed. Specifically, it was found that any authenticated user can reach the administrative console for user management by directly requesting access to the page via URL. This allows a malicious user to modify all users' profiles, to elevate any privileges to administrative ones, or to create or delete any type of user. It is also possible to modify the emails of other users, through a misconfiguration of the username parameter, on the user profile page. This is fixed in all recent versions, such as version 26. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Version 21.3 was officially de-supported by the end of 2020

• CWE-862

• https://www.gruppotim.it/redteamThird Party Advisory
• https://www.gruppotim.it/redteamThird Party Advisory

Published

Oct 5, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-41547A vulnerability has been identified in Teamcenter Active Wor…7.2
• CVE-2021-4155A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL …5.5
• CVE-2021-41550Leostream Connection Broker 9.0.40.17 allows administrator t…7.2
• CVE-2021-41551Leostream Connection Broker 9.0.40.17 allows administrators …4.9
• CVE-2021-41552CommScope SURFboard SBG6950AC2 9.1.103AA23 devices allow Com…8.8
• CVE-2021-41553In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), th…9.8
• CVE-2021-41555In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), XS…6.1
• CVE-2021-41556sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 al…10
• CVE-2021-41557Sofico Miles RIA 2020.2 Build 127964T is affected by Stored …5.4
• CVE-2021-41558The set_user extension module before 3.0.0 for PostgreSQL al…9.8
• CVE-2021-41559Silverstripe silverstripe/framework 4.8.1 has a quadratic bl…6.5
• CVE-2021-4156An out-of-bounds read flaw was found in libsndfile's FLAC co…7.1