Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-44792

Опубликовано: 27 янв. 2022
Источник: nvd
CVSS3: 5.3
CVSS2: 5
EPSS Низкий

Описание

Single Connect does not perform an authorization check when using the "log-monitor" module. A remote attacker could exploit this vulnerability to access the logging interface. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:krontech:single_connect:*:*:*:*:*:*:*:*
Версия до 2.16 (исключая)

EPSS

Процентиль: 60%
0.00392
Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-862
CWE-862

Связанные уязвимости

CVSS3: 5.3
github
около 4 лет назад

Single Connect does not perform an authorization check when using the "log-monitor" module. A remote attacker could exploit this vulnerability to access the logging interface. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information.

EPSS

Процентиль: 60%
0.00392
Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-862
CWE-862