deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-43838
Published: 2021-12-17
Description: jsx-slack is a library for building JSON objects for Slack Block Kit surfaces from JSX. In versions prior to 4.5.1 users are vulnerable to a regular expression denial-of-service (ReDoS) attack. If attacker can put a lot of JSX elements into `<blockquote>` tag, an internal regular expression for escaping characters may consume an excessive amount of computing resources. jsx-slack v4.5.1 has patched to a regex for escaping blockquote characters. Users are advised to upgrade as soon as possible.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-1333
References: https://github.com/yhatt/jsx-slack/commit/36e4a10405e4c7745333e245fcc5029c02c7065d; https://github.com/yhatt/jsx-slack/security/advisories/GHSA-55xv-f85c-248q; https://github.com/yhatt/jsx-slack/commit/36e4a10405e4c7745333e245fcc5029c02c7065d
CVE: CVE-2021-43840
Published: 2021-12-17
Description: message_bus is a messaging bus for Ruby processes and web clients. In versions prior to 3.3.7 users who deployed message bus with diagnostics features enabled (default off) are vulnerable to a path traversal bug, which could lead to disclosure of secret information on a machine if an unintended user were to gain access to the diagnostic route. The impact is also greater if there is no proxy for your web application as the number of steps up the directories is not bounded. For deployments which uses a proxy, the impact varies. For example, If a request goes through a proxy like Nginx with `merge_slashes` enabled, the number of steps up the directories that can be read is limited to 3 levels. This issue has been patched in version 3.3.7. Users unable to upgrade should ensure that MessageBus::Diagnostics is disabled.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-22
References: https://github.com/discourse/message_bus/commit/9b6deee01ed474c7e9b5ff65a06bb0447b4db2ba; https://github.com/discourse/message_bus/security/advisories/GHSA-xmgj-5fh3-xjmm; https://github.com/discourse/message_bus/commit/9b6deee01ed474c7e9b5ff65a06bb0447b4db2ba
CVE: CVE-2021-23450
Published: 2021-12-17
Description: All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1321
References: https://github.com/dojo/dojo/blob/4c39c14349408fc8274e19b399ffc660512ed07c/_base/lang.js%23L172; https://lists.debian.org/debian-lts-announce/2023/01/msg00030.html; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-2313036
CVE: CVE-2021-23797
Published: 2021-12-17
Description: All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://snyk.io/vuln/SNYK-JS-HTTPSERVERNODE-1727656; https://snyk.io/vuln/SNYK-JS-HTTPSERVERNODE-1727656
CVE: CVE-2021-23803
Published: 2021-12-17
Description: This affects the package latte/latte before 2.10.6. There is a way to bypass allowFunctions that will affect the security of the application. When the template is set to allow/disallow the use of certain functions, adding control characters (x00-x08) after the function will bypass these restrictions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://github.com/nette/latte/commit/227c86eda9a8a6d060ea8501923e768b6d992210; https://github.com/nette/latte/issues/279; https://snyk.io/vuln/SNYK-PHP-LATTELATTE-1932226
CVE: CVE-2021-23814
Published: 2021-12-17
Description: This affects versions of the package unisharp/laravel-filemanager before 2.6.2. The upload() function does not sufficiently validate the file type when uploading.An attacker may be able to reproduce the following steps:1. Install a package with a web Laravel application.2. Navigate to the Upload window3. Upload an image file, then capture the request4. Edit the request contents with a malicious file (webshell)5. Enter the path of file uploaded on URL - Remote Code Execution**Note:** Prevention for bad extensions can be done by using a whitelist in the config file(lfm.php). Corresponding document can be found in [here](https://unisharp.github.io/laravel-filemanager/configfolder-categories).
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-94, CWE-434
References: https://github.com/UniSharp/laravel-filemanager/blob/master/src/Controllers/UploadController.php%23L26; https://github.com/UniSharp/laravel-filemanager/issues/1113; https://github.com/UniSharp/laravel-filemanager/releases/tag/v2.5.1
CVE: CVE-2021-41495
Published: 2021-12-17
Description: Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476
References: https://github.com/numpy/numpy/issues/19038; https://www.oracle.com/security-alerts/cpujul2022.html; https://github.com/numpy/numpy/issues/19038
CVE: CVE-2021-41496
Published: 2021-12-17
Description: Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://github.com/numpy/numpy/issues/19000; https://www.oracle.com/security-alerts/cpujul2022.html; https://github.com/numpy/numpy/issues/19000
CVE: CVE-2021-41497
Published: 2021-12-17
Description: Null pointer reference in CMS_Conservative_increment_obj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/RaRe-Technologies/bounter/issues/47; https://github.com/RaRe-Technologies/bounter/issues/47
CVE: CVE-2021-41498
Published: 2021-12-17
Description: Buffer overflow in ajaxsoundstudio.com Pyo &lt and 1.03 in the Server_jack_init function. which allows attackers to conduct Denial of Service attacks by arbitrary constructing a overlong server name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/belangeo/pyo/issues/221; https://github.com/belangeo/pyo/issues/221
CVE: CVE-2021-41499
Published: 2021-12-17
Description: Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo < 1.03 in the Server_debug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/belangeo/pyo/issues/222; https://github.com/belangeo/pyo/issues/222
CVE: CVE-2021-41500
Published: 2021-12-17
Description: Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve), which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects.
CVSS Score: 7.5 (HIGH)
CWE: CWE-697
References: https://github.com/cvxopt/cvxopt/issues/193; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CXTPM3DGVYTYQ54OFCMXZVWVOMR7JM2D/; https://github.com/cvxopt/cvxopt/issues/193
CVE: CVE-2021-4130
Published: 2021-12-18
Description: snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/snipe/snipe-it/commit/9b2dd6522f214a3fbee6a4e32699104d0ea2b6ae; https://huntr.dev/bounties/ccf073cd-7f54-4d51-89f2-6b4a2e4ae81e; https://github.com/snipe/snipe-it/commit/9b2dd6522f214a3fbee6a4e32699104d0ea2b6ae
CVE: CVE-2021-4131
Published: 2021-12-18
Description: livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/livehelperchat/livehelperchat/commit/3b5d0a8a43595a7f05f2a81b76623a8d7e5ad19f; https://huntr.dev/bounties/52dfac87-4fd3-4dfb-83d2-d39916764d43; https://github.com/livehelperchat/livehelperchat/commit/3b5d0a8a43595a7f05f2a81b76623a8d7e5ad19f
CVE: CVE-2021-45105
Published: 2021-12-18
Description: Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20, CWE-674, CWE-20, CWE-674
References: http://www.openwall.com/lists/oss-security/2021/12/19/1; https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-501673.pdf
CVE: CVE-2021-43083
Published: 2021-12-19
Description: Apache PLC4X - PLC4C (Only the C language implementation was effected) was vulnerable to an unsigned integer underflow flaw inside the tcp transport. Users should update to 0.9.1, which addresses this issue. However, in order to exploit this vulnerability, a user would have to actively connect to a mallicious device which could send a response with invalid content. Currently we consider the probability of this being exploited as quite minimal, however this could change in the future, especially with the industrial networks growing more and more together.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-191, CWE-191
References: http://www.openwall.com/lists/oss-security/2021/12/20/2; https://lists.apache.org/thread/jxx6qc84z60xbbhn6vp2s5qf09psrtc7; http://www.openwall.com/lists/oss-security/2021/12/20/2
CVE: CVE-2021-45041
Published: 2021-12-19
Description: SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection via the Tooltips action in the Project module, involving resource_id and start_date.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://docs.suitecrm.com/8.x/admin/releases/8.0/; https://docs.suitecrm.com/admin/releases/7.12.x/; https://github.com/manuelz120/CVE-2021-45041
CVE: CVE-2021-4136
Published: 2021-12-19
Description: vim is vulnerable to Heap-based Buffer Overflow
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: http://seclists.org/fulldisclosure/2022/Jul/14; http://seclists.org/fulldisclosure/2022/Mar/29; http://seclists.org/fulldisclosure/2022/May/35
CVE: CVE-2021-44159
Published: 2021-12-20
Description: 4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.twcert.org.tw/tw/cp-132-5395-eee40-1.html; https://www.twcert.org.tw/tw/cp-132-5395-eee40-1.html
CVE: CVE-2021-44162
Published: 2021-12-20
Description: Chain Sea ai chatbot system’s specific file download function has path traversal vulnerability. The function has improper filtering of special characters in URL parameters, which allows a remote attacker to download arbitrary system files without authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.twcert.org.tw/tw/cp-132-5397-b1f40-1.html; https://www.twcert.org.tw/tw/cp-132-5397-b1f40-1.html
CVE: CVE-2021-44163
Published: 2021-12-20
Description: Chain Sea ai chatbot backend has improper filtering of special characters in URL parameters, which allows a remote attacker to perform JavaScript injection for XSS (reflected Cross-site scripting) attack without authentication.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.twcert.org.tw/tw/cp-132-5399-03b81-1.html; https://www.twcert.org.tw/tw/cp-132-5399-03b81-1.html
CVE: CVE-2021-44164
Published: 2021-12-20
Description: Chain Sea ai chatbot system’s file upload function has insufficient filtering for special characters in URLs, which allows a remote attacker to by-pass file type validation, upload malicious script and execute arbitrary code without authentication, in order to take control of the system or terminate service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.twcert.org.tw/tw/cp-132-5400-c31d1-1.html; https://www.twcert.org.tw/tw/cp-132-5400-c31d1-1.html
CVE: CVE-2021-44732
Published: 2021-12-20
Description: Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: https://bugs.gentoo.org/829660; https://github.com/ARMmbed/mbedtls/releases; https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.12
CVE: CVE-2021-42913
Published: 2021-12-20
Description: The SyncThru Web Service on Samsung SCX-6x55X printers allows an attacker to gain access to a list of SMB users and cleartext passwords by reading the HTML source code. Authentication is not required.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://medium.com/%40windsormoreira/samsung-printer-scx-6x55x-improper-access-control-cve-2021-42913-bd50837e5e9a; https://security.samsungmobile.com/securityUpdate.smsb; https://medium.com/%40windsormoreira/samsung-printer-scx-6x55x-improper-access-control-cve-2021-42913-bd50837e5e9a
CVE: CVE-2021-44263
Published: 2021-12-20
Description: Gurock TestRail before 7.2.4 mishandles HTML escaping.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://discuss.gurock.com/t/testrail-7-2-4-released-to-cloud/20248; https://gist.github.com/miglen/b09498b4b9fe1be58973bd474af125ab; https://discuss.gurock.com/t/testrail-7-2-4-released-to-cloud/20248
CVE: CVE-2021-44554
Published: 2021-12-20
Description: Thinfinity VirtualUI before 3.0 allows a malicious actor to enumerate users registered in the OS (Windows) through the /changePassword URI. By accessing the vector, an attacker can determine if a username exists thanks to the message returned; it can be presented in different languages according to the configuration of VirtualUI. Common users are administrator, admin, guest and krgtbt.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://github.com/cybelesoft/virtualui/issues/1; https://github.com/cybelesoft/virtualui/issues/1
CVE: CVE-2021-44858
Published: 2021-12-20
Description: An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. It is possible to use action=edit&undo= followed by action=mcrundo and action=mcrrestore to view private pages on a private wiki that has at least one page set in $wgWhitelistRead.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://phabricator.wikimedia.org/T297322; https://security.gentoo.org/glsa/202305-24; https://www.mediawiki.org/wiki/2021-12_security_release/FAQ
CVE: CVE-2021-41561
Published: 2021-12-20
Description: Improper Input Validation vulnerability in Parquet-MR of Apache Parquet allows an attacker to DoS by malicious Parquet files. This issue affects Apache Parquet-MR version 1.9.0 and later versions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: http://www.openwall.com/lists/oss-security/2021/12/20/1; https://lists.apache.org/thread/1bjlscbqtfzl160hrm9lnpjpppp5z3zr; http://www.openwall.com/lists/oss-security/2021/12/20/1
CVE: CVE-2021-44224
Published: 2021-12-20
Description: A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).
CVSS Score: 8.2 (HIGH)
CWE: CWE-476, CWE-476
References: http://httpd.apache.org/security/vulnerabilities_24.html; http://seclists.org/fulldisclosure/2022/May/33; http://seclists.org/fulldisclosure/2022/May/35
CVE: CVE-2021-44790
Published: 2021-12-20
Description: A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: http://httpd.apache.org/security/vulnerabilities_24.html; http://packetstormsecurity.com/files/171631/Apache-2.4.x-Buffer-Overflow.html; http://seclists.org/fulldisclosure/2022/May/33
CVE: CVE-2021-44916
Published: 2021-12-20
Description: Opmantek Open-AudIT Community 4.2.0 (Fixed in 4.3.0) is affected by a Cross Site Scripting (XSS) vulnerability. If a bad value is passed to the routine via a URL, malicious JavaScript code can be executed in the victim's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/165502/Open-AudIT-Community-4.2.0-Cross-Site-Scripting.html; https://community.opmantek.com/display/OA/Errata+-+4.2.0+and+earlier+Javascript+vulnerability; https://community.opmantek.com/display/OA/Release+Notes+for+Open-AudIT+v4.3.0
CVE: CVE-2020-8105
Published: 2021-12-20
Description: OS Command Injection vulnerability in the wirelessConnect handler of Abode iota All-In-One Security Kit allows an attacker to inject commands and gain root access. This issue affects: Abode iota All-In-One Security Kit versions prior to 1.0.2.23_6.9V_dev_t2_homekit_RF_2.0.19_s2_kvsABODE oz.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-theabode-iota-security-system-fake-image-injectioninto-timeline; https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-theabode-iota-security-system-fake-image-injectioninto-timeline
CVE: CVE-2021-44675
Published: 2021-12-20
Description: Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution due to a filter bypass in which authentication is not required.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://pitstop.manageengine.com/portal/en/community/topic/security-advisory-authentication-bypass-vulnerabilities-in-servicedesk-plus-msp-that-could-lead-to-remote-code-execution; https://pitstop.manageengine.com/portal/en/community/topic/security-advisory-authentication-bypass-vulnerabilities-in-servicedesk-plus-msp-that-could-lead-to-remote-code-execution
CVE: CVE-2021-44676
Published: 2021-12-20
Description: Zoho ManageEngine Access Manager Plus before 4203 allows anyone to view a few data elements (e.g., access control details) and modify a few aspects of the application state.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://pitstop.manageengine.com/portal/en/community/topic/security-advisory-authentication-bypass-vulnerability-in-access-manager-plus-build-4202-and-prior; https://www.manageengine.com; https://pitstop.manageengine.com/portal/en/community/topic/security-advisory-authentication-bypass-vulnerability-in-access-manager-plus-build-4202-and-prior
CVE: CVE-2021-44525
Published: 2021-12-20
Description: Zoho ManageEngine PAM360 before build 5303 allows attackers to modify a few aspects of application state because of a filter bypass in which authentication is not required.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://pitstop.manageengine.com/portal/en/community/topic/title-security-advisory-for-cve-2021-44525-authentication-bypass-vulnerability-in-manageengine-pam360; https://pitstop.manageengine.com/portal/en/community/topic/title-security-advisory-for-cve-2021-44525-authentication-bypass-vulnerability-in-manageengine-pam360
CVE: CVE-2020-19316
Published: 2021-12-20
Description: OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://www.netbytesec.com/advisories/OSCommandInjectionInLaravelFramework/; https://github.com/laravel/framework/commit/44c3feb604944599ad1c782a9942981c3991fa31; http://www.netbytesec.com/advisories/OSCommandInjectionInLaravelFramework/
CVE: CVE-2021-43437
Published: 2021-12-20
Description: In sourcecodetester Engineers Online Portal as of 10-21-21, an attacker can manipulate the Host header as seen by the web application and cause the application to behave in unexpected ways. Very often multiple websites are hosted on the same IP address. This is where the Host Header comes in. This header specifies which website should process the HTTP request. The web server uses the value of this header to dispatch the request to the specified website. Each website hosted on the same IP address is called a virtual host. And It's possible to send requests with arbitrary Host Headers to the first virtual host.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://medium.com/%40mayhem7999/cve-2021-43437-5c5e3b977e84; https://portswigger.net/web-security/host-header; https://medium.com/%40mayhem7999/cve-2021-43437-5c5e3b977e84
CVE: CVE-2021-43438
Published: 2021-12-20
Description: Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/MartDevelopers-Inc/iResturant; https://medium.com/%40mayhem7999/cve-2021-43438-5260c9d2501a; https://github.com/MartDevelopers-Inc/iResturant
CVE: CVE-2021-43439
Published: 2021-12-20
Description: RCE in Add Review Function in iResturant 1.0 Allows remote attacker to execute commands remotely
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-79
References: https://github.com/MartDevelopers-Inc/iResturant; https://medium.com/%40mayhem7999/cve-2021-43439-79c8ff1801fc; https://github.com/MartDevelopers-Inc/iResturant
CVE: CVE-2021-43440
Published: 2021-12-20
Description: Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/MartDevelopers-Inc/Order_Processing_MIS; https://medium.com/%40mayhem7999/cve-2021-43439-d04781bca6ce; https://github.com/MartDevelopers-Inc/Order_Processing_MIS
CVE: CVE-2021-43441
Published: 2021-12-20
Description: An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-79
References: https://github.com/MartDevelopers-Inc/Order_Processing_MIS; https://medium.com/%40mayhem7999/cve-2021-43441-2fcc857cb6bb; https://github.com/MartDevelopers-Inc/Order_Processing_MIS
CVE: CVE-2021-22056
Published: 2021-12-20
Description: VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3.3.3 contain an SSRF vulnerability. A malicious actor with network access may be able to make HTTP requests to arbitrary origins and read the full response.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://www.vmware.com/security/advisories/VMSA-2021-0030.html; https://www.vmware.com/security/advisories/VMSA-2021-0030.html
CVE: CVE-2021-22057
Published: 2021-12-20
Description: VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 contain an authentication bypass vulnerability. A malicious actor, who has successfully provided first-factor authentication, may be able to obtain second-factor authentication provided by VMware Verify.
CVSS Score: 8.8 (HIGH)
References: https://www.vmware.com/security/advisories/VMSA-2021-0030.html; https://www.vmware.com/security/advisories/VMSA-2021-0030.html
CVE: CVE-2021-35234
Published: 2021-12-20
Description: Numerous exposed dangerous functions within Orion Core has allows for read-only SQL injection leading to privileged escalation. An attacker with low-user privileges may steal password hashes and password salt information.
CVSS Score: 8.0 (HIGH)
CWE: CWE-89, CWE-89
References: https://documentation.solarwinds.com/en/Success_Center/orionplatform/content/core-secure-configuration.htm; https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-3; https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35234