CVE-2021-38289

An issue has been discovered in Novastar-VNNOX-iCare Novaicare 7.16.0 that gives attacker privilege escalation and allows attackers to view corporate information and SMTP server details, delete users, view roles, and other unspecified impacts.

Date published : 2022-07-12

https://github.com/viperbluff/Novastar-VNNOX-iCare-Privilege-Escalation

Disclosing Multiple Privilege Escalation bugs discovered on Novastar VNNOX icare platform :

Disclosure URL: https://t.co/vHFZ5PedDs

#bugs #redteam #0day #zeroday #privileges #infosec #penetrationtesting

— Sahil Tikoo (@viperbluff) September 20, 2021