Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-21691 State: PUBLISHED Published: 2021-11-04T16:30:33 Last Updated: 2024-08-03T18:23:27.504Z Vendors: Jenkins project Products: Jenkins Description: Creating symbolic links is possible without the 'symlink' agent-to-controller access control permission in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455
CVE ID: CVE-2021-21692 State: PUBLISHED Published: 2021-11-04T16:30:35 Last Updated: 2024-08-03T18:23:27.493Z Vendors: Jenkins project Products: Jenkins Description: FilePath#renameTo and FilePath#moveAllChildrenTo in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier only check 'read' agent-to-controller access permission on the source path, instead of 'delete'. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455
CVE ID: CVE-2021-21693 State: PUBLISHED Published: 2021-11-04T00:00:00 Last Updated: 2024-08-03T18:23:29.405Z Vendors: Jenkins project Products: Jenkins Description: When creating temporary files, agent-to-controller access to create those files is only checked after they've been created in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455
CVE ID: CVE-2021-21694 State: PUBLISHED Published: 2021-11-04T16:30:38 Last Updated: 2024-08-03T18:23:29.286Z Vendors: Jenkins project Products: Jenkins Description: FilePath#toURI, FilePath#hasSymlink, FilePath#absolutize, FilePath#isDescendant, and FilePath#get*DiskSpace do not check any permissions in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455
CVE ID: CVE-2021-21695 State: PUBLISHED Published: 2021-11-04T16:30:40 Last Updated: 2024-08-03T18:23:28.306Z Vendors: Jenkins project Products: Jenkins Description: FilePath#listFiles lists files outside directories that agents are allowed to access when following symbolic links in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455 - http://www.openwall.com/lists/oss-security/2021/11/04/3
CVE ID: CVE-2021-21696 State: PUBLISHED Published: 2021-11-04T16:30:41 Last Updated: 2024-08-03T18:23:29.397Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not limit agent read/write access to the libs/ directory inside build directories when using the FilePath APIs, allowing attackers in control of agent processes to replace the code of a trusted library with a modified variant. This results in unsandboxed code execution in the Jenkins controller process. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2423 - http://www.openwall.com/lists/oss-secur
ferences: - https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2423 - http://www.openwall.com/lists/oss-security/2021/11/04/3
CVE ID: CVE-2021-21697 State: PUBLISHED Published: 2021-11-04T16:30:43 Last Updated: 2024-08-03T18:23:28.765Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents of any build directory stored in Jenkins with very few restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2428 - http://www.openwall.com/lists/oss-security/2021/11/04/3
CVE ID: CVE-2021-21698 State: PUBLISHED Published: 2021-11-04T16:30:44 Last Updated: 2024-08-03T18:23:27.475Z Vendors: Jenkins project Products: Jenkins Subversion Plugin Description: Jenkins Subversion Plugin 2.15.0 and earlier does not restrict the name of a file when looking up a subversion key file on the controller from an agent. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2506 - http://www.openwall.com/lists/oss-security/2021/11/04/3
CVE ID: CVE-2021-21699 State: PUBLISHED Published: 2021-11-12T10:35:15 Last Updated: 2024-08-03T18:23:29.538Z Vendors: Jenkins project Products: Jenkins Active Choices Plugin Description: Jenkins Active Choices Plugin 2.5.6 and earlier does not escape the parameter name of reactive parameters and dynamic reference parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2021-11-12/#SECURITY-2219 - http://www.openwall.com/lists/oss-security/2021/11/12/1
CVE ID: CVE-2021-21700 State: PUBLISHED Published: 2021-11-12T10:35:17 Last Updated: 2024-08-03T18:23:29.167Z Vendors: Jenkins project Products: Jenkins Scriptler Plugin Description: Jenkins Scriptler Plugin 3.3 and earlier does not escape the name of scripts on the UI when asking to confirm their deletion, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by exploitable by attackers able to create Scriptler scripts. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2021-11-12/#SECURITY-2406 - http://www.openwall.com/lists/oss-security/2021/11/12/1
CVE ID: CVE-2021-21701 State: PUBLISHED Published: 2021-11-12T10:35:18 Last Updated: 2024-08-03T18:23:29.409Z Vendors: Jenkins project Products: Jenkins Performance Plugin Description: Jenkins Performance Plugin 3.20 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2021-11-12/#SECURITY-2394 - http://www.openwall.com/lists/oss-security/2021/11/12/1 - https://www.zerodayinitiative.com/advisories/ZDI-21-1313/
CVE ID: CVE-2021-21702 State: PUBLISHED Published: 2021-02-15T04:10:16.837039Z Last Updated: 2024-09-16T17:34:26.201Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-476 Description: In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus cause a crash. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=80672 - https://www.debian.org/security/2021/dsa-4856 - https://securi
er: References: - https://bugs.php.net/bug.php?id=80672 - https://www.debian.org/security/2021/dsa-4856 - https://security.gentoo.org/glsa/202105-23 - https://lists.debian.org/debian-lts-announce/2021/07/msg00008.html - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.tenable.com/security/tns-2021-14 - https://security.netapp.com/advisory/ntap-20210312-0005/
CVE ID: CVE-2021-21703 State: PUBLISHED Published: 2021-10-25T05:40:08.576727Z Last Updated: 2024-09-17T03:02:55.020Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: PHP Group Products: PHP Problem Types: CWE-787, CWE-284 Description: In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child processes to access memory shared with the main process and write to it, modifying it in a way that would cause the root process to conduct invalid memory reads and writes, which
d write to it, modifying it in a way that would cause the root process to conduct invalid memory reads and writes, which can be used to escalate privileges from local unprivileged user to the root user. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=81026 - https://www.debian.org/security/2021/dsa-4992 - https://www.debian.org/security/2021/dsa-4993 - http://www.openwall.com/lists/oss-security/2021/10/26/7 - https://lists.debian.org/debian-lts-announce/2021/10/msg00021.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO5RA6YOBGGGKLIA6F6BQRZDDECF5L3R/ - https://lists.fedoraproject.org/arch
kage-announce%40lists.fedoraproject.org/message/JO5RA6YOBGGGKLIA6F6BQRZDDECF5L3R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PBM3KKB3RY2YPOKNMC4HIH7IH3T3WC74/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PZVLICZUJMXOGWOUWSBAEGIVTF6Y6V3/ - https://www.oracle.com/security-alerts/cpujan2022.html - https://security.netapp.com/advisory/ntap-20211118-0003/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.gentoo.org/glsa/202209-20
CVE ID: CVE-2021-21704 State: PUBLISHED Published: 2021-10-04T04:00:13.838637Z Last Updated: 2024-09-17T00:45:32.187Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-125, CWE-190 Description: In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute(), execute(), fetch() and others by returning invalid response data that is not parsed correctly by the driver. This can result in crashes, denial of service or potentially memory corruption. Additional Analyst No
tly by the driver. This can result in crashes, denial of service or potentially memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=76448 - https://bugs.php.net/bug.php?id=76449 - https://bugs.php.net/bug.php?id=76450 - https://bugs.php.net/bug.php?id=76452 - https://security.netapp.com/advisory/ntap-20211029-0006/ - https://security.gentoo.org/glsa/202209-20
CVE ID: CVE-2021-21705 State: PUBLISHED Published: 2021-10-04T04:00:15.654508Z Last Updated: 2024-09-17T04:09:29.556Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: PHP Group Products: PHP Problem Types: CWE-20 Description: In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation functionality via filter_var() function with FILTER_VALIDATE_URL parameter, an URL with invalid password field can be accepted as valid. This can lead to the code incorrectly parsing the URL and potentially leading to other security implications - like contacting a wrong server or making a wrong access decision. Additional Analyst Note
other security implications - like contacting a wrong server or making a wrong access decision. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=81122 - https://www.oracle.com/security-alerts/cpujan2022.html - https://security.netapp.com/advisory/ntap-20211029-0006/ - https://security.gentoo.org/glsa/202209-20
CVE ID: CVE-2021-21706 State: PUBLISHED Published: 2021-10-04T04:00:17.182563Z Last Updated: 2024-09-16T23:06:09.569Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: PHP Group Products: PHP Problem Types: CWE-24 Description: In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into writing a file outside target directory when extracting a ZIP file, thus potentially causing files to be created or overwritten, subject to OS permissions. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=81420 - https://security.netapp.c
Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=81420 - https://security.netapp.com/advisory/ntap-20211029-0007/
CVE ID: CVE-2021-21707 State: PUBLISHED Published: 2021-11-29T06:25:08.814960Z Last Updated: 2024-09-17T03:38:22.394Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: PHP Group Products: PHP Problem Types: CWE-159 Description: In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the filename, thus interpreting the filename differently from what the user intended, which may lead it to reading a different file than intended. Ad
ng the filename differently from what the user intended, which may lead it to reading a different file than intended. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=79971 - https://security.netapp.com/advisory/ntap-20211223-0005/ - https://www.debian.org/security/2022/dsa-5082 - https://www.tenable.com/security/tns-2022-09 - https://lists.debian.org/debian-lts-announce/2022/12/msg00030.html
CVE ID: CVE-2021-21708 State: PUBLISHED Published: 2022-02-27T08:00:12.018780Z Last Updated: 2024-09-17T03:18:02.531Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-416 Description: In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it crashes, and potentially in overwrite of other memory chunks and RCE. This issue affects: code that uses FILTER_VALIDATE_FLOAT with min/max limits. Additional Analyst Not
ory chunks and RCE. This issue affects: code that uses FILTER_VALIDATE_FLOAT with min/max limits. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=81708 - https://security.netapp.com/advisory/ntap-20220325-0004/ - https://security.gentoo.org/glsa/202209-20
CVE ID: CVE-2021-21722 State: PUBLISHED Published: 2021-01-14T15:57:48 Last Updated: 2024-08-03T18:23:28.489Z Vendors: n/a Products: ZXV10 B860A Problem Types: information leak Description: A ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, so attackers could use this vulnerability to obtain sensitive user information for further information detection and attacks. This affects: ZXV10 B860A V2.1-T_V0032.1.1.04_jiangsuTelecom. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014324
CVE ID: CVE-2021-21723 State: PUBLISHED Published: 2021-01-21T19:05:49 Last Updated: 2024-08-03T18:23:29.438Z Vendors: n/a Products: <ZXR10 9904, ZXR10 9908, ZXR10 9916, ZXR10 9904-S, ZXR10 9908-S> Problem Types: DoS Description: Some ZTE products have a DoS vulnerability. Due to the improper handling of memory release in some specific scenarios, a remote attacker can trigger the vulnerability by performing a series of operations, resulting in memory leak, which may eventually lead to device denial of service. This affects: ZXR10 9904, ZXR10 9908, ZXR10 9916, ZXR10 9904-S, ZXR10 9908-S; all versions up to V1.01.10.B12. Additional Analyst Notes: - CVE Program Container: References: - http://s
ZXR10 9908-S; all versions up to V1.01.10.B12. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014424
CVE ID: CVE-2021-21724 State: PUBLISHED Published: 2021-02-26T02:37:07 Last Updated: 2024-08-03T18:23:28.650Z Vendors: n/a Products: ZXR10 8900E Problem Types: Memory Leak Description: A ZTE product has a memory leak vulnerability. Due to the product's improper handling of memory release in certain scenarios, a local attacker with device permissions repeatedly attenuated the optical signal to cause memory leak and abnormal service. This affects: ZXR10 8900E, all versions up to V3.03.20R2B30P1. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014584
CVE ID: CVE-2021-21725 State: PUBLISHED Published: 2021-03-05T16:53:08 Last Updated: 2024-08-03T18:23:29.563Z Vendors: n/a Products: ZXHN H196Q Problem Types: Information Leak Description: A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in other directories by performing specific operations, resulting in information leak. This affects: ZXHN H196Q V9.1.0C2. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014624
CVE ID: CVE-2021-21726 State: PUBLISHED Published: 2021-03-12T18:05:34 Last Updated: 2024-08-03T18:23:28.330Z Vendors: n/a Products: <ZXONE 9700 , ZXONE 8700, ZXONE 19700> Problem Types: input verification Description: Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:<ZXONE 9700 , ZXONE 8700, ZXONE 19700><V1.40.021.021CP049, V1.0P02B219_@NCPM-RELEASE_2.40R1-20200914.set> Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/s
ELEASE_2.40R1-20200914.set> Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014664
CVE ID: CVE-2021-21727 State: PUBLISHED Published: 2021-03-29T15:41:42 Last Updated: 2024-08-03T18:23:29.287Z Vendors: n/a Products: <ZXHN F623> Problem Types: DoS Description: A ZTE product has a DoS vulnerability. A remote attacker can amplify traffic by sending carefully constructed IPv6 packets to the affected devices, which eventually leads to device denial of service. This affects:<ZXHN F623><All versions up to V6.0.0P3T33> Additional Analyst Notes: - CVE Program Container: References: - https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014744
CVE ID: CVE-2021-21728 State: PUBLISHED Published: 2021-04-09T17:23:32 Last Updated: 2024-08-03T18:23:29.029Z Vendors: n/a Products: ZXA10 C300M Problem Types: configuration error Description: A ZTE product has a configuration error vulnerability. Because a certain port is open by default, an attacker can consume system processing resources by flushing a large number of packets to the port, and successfully exploiting this vulnerability could reduce system processing capabilities. This affects: ZXA10 C300M all versions up to V4.3P8. Additional Analyst Notes: - CVE Program Container: References: - https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014784
CVE ID: CVE-2021-21729 State: PUBLISHED Published: 2021-04-13T15:13:26 Last Updated: 2024-08-03T18:23:29.233Z Vendors: n/a Products: ZXHN H168N,ZXHN H108N Problem Types: CSRF Description: Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authorization operations by constructing messages.This affects: ZXHN H168N V3.5.0_EG1T5_TE, V2.5.5, ZXHN H108N V2.5.5_BTMT1 Additional Analyst Notes: - CVE Program Container: References: - https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014904
CVE ID: CVE-2021-21730 State: PUBLISHED Published: 2021-04-13T15:08:08 Last Updated: 2024-08-03T18:23:29.498Z Vendors: n/a Products: ZXHN H168N Problem Types: Improper Access Control Description: A ZTE product is impacted by improper access control vulnerability. The attacker could exploit this vulnerability to access CLI by brute force attacks.This affects: ZXHN H168N V3.5.0_TY.T6 Additional Analyst Notes: - CVE Program Container: References: - https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014864
CVE ID: CVE-2021-21731 State: PUBLISHED Published: 2021-04-13T15:05:19 Last Updated: 2024-08-03T18:23:28.237Z Vendors: n/a Products: ZXCLOUD iRAI Problem Types: CSRF Description: A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the request comes from a trusted user. The attacker could submit a malicious request to the affected device to delete the data. This affects: ZXCLOUD iRAI All versions up to KVM-ProductV6.03.04 Additional Analyst Notes: - CVE Program Container: References: - https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014824
CVE ID: CVE-2021-21732 State: PUBLISHED Published: 2021-05-19T10:48:50 Last Updated: 2024-08-03T18:23:28.943Z Vendors: n/a Products: <Axon 11 5G> Problem Types: Improper Access Control Description: A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authorization. Attackers could exploit this vulnerability to obtain sensitive information. This affects Axon 11 5G ZTE/CN_P725A12/P725A12:10/QKQ1.200816.002/20201116.175317:user/release-keys. Additional Analyst Notes: - CVE Program Container: References: - https://support.zte.com.cn/support/news/LoopholeInfoDet
Additional Analyst Notes: - CVE Program Container: References: - https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1015064
CVE ID: CVE-2021-21733 State: PUBLISHED Published: 2021-05-19T11:00:58 Last Updated: 2024-08-03T18:23:29.510Z Vendors: n/a Products: <ZXCDN V7.01> Problem Types: Information Leak Description: The management system of ZXCDN is impacted by the information leak vulnerability. Attackers can make further analysis according to the information returned by the program, and then obtain some sensitive information. This affects ZXCDN V7.01 all versions up to IAMV7.01.01.02. Additional Analyst Notes: - CVE Program Container: References: - https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1015304
CVE ID: CVE-2021-21734 State: PUBLISHED Published: 2021-05-28T11:45:42 Last Updated: 2024-08-03T18:23:29.232Z Vendors: n/a Products: ZTE PON MDU devices Problem Types: cryptographic issues Description: Some PON MDU devices of ZTE stored sensitive information in plaintext, and users with login authority can obtain it by inputing command. This affects: ZTE PON MDU device ZXA10 F821 V1.7.0P3T22, ZXA10 F822 V1.4.3T6, ZXA10 F819 V1.2.1T5, ZXA10 F832 V1.1.1T7, ZXA10 F839 V1.1.0T8, ZXA10 F809 V3.2.1T1, ZXA10 F822P V1.1.1T7, ZXA10 F832 V2.00.00.01 Additional Analyst Notes: - CVE Program Container: References: - https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1015524
CVE ID: CVE-2021-21735 State: PUBLISHED Published: 2021-06-10T11:18:23 Last Updated: 2024-08-03T18:23:28.226Z Vendors: n/a Products: ZXHN H168N Problem Types: information leak Description: A ZTE product has an information leak vulnerability. Due to improper permission settings, an attacker with ordinary user permissions could exploit this vulnerability to obtain some sensitive user information through the wizard page without authentication. This affects ZXHN H168N all versions up to V3.5.0_EG1T4_TE. Additional Analyst Notes: - CVE Program Container: References: - https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1015924