CVE-2021-31868

—

CVSS 3.1

5.4 medium

EPSS

<1%p40

Published

Aug 19, 2021 (Aug 19, 2021)

Modified

Jun 17, 2026

Description

Rapid7 Nexpose version 6.6.95 and earlier allows authenticated users of the Security Console to view and edit any ticket in the legacy ticketing feature, regardless of the assignment of the ticket. This issue was resolved in version 6.6.96, released on August 4, 2021.

Vendors: rapid7
Products: nexpose
Weakness: CWE-306
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.