CVE-2021-29396

9.8 criticalEPSS 1.7%

Critical (9.8) in globalnorthstar northstar club management. EPSS 1.7% chance of exploitation in the next 30 days.

Systemic Insecure Permissions in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to use various functionalities without authentication.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2022-02-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

globalnorthstar:northstar_club_management

References

https://Ardent-Security.com
https://ardent-security.com/en/advisory/asa-2021-04/
https://Ardent-Security.com
https://ardent-security.com/en/advisory/asa-2021-04/

Check your stack JSON