Lucene search

SolarWindsCVE-2021-35246

HistoryNov 23, 2022 - 5:15 p.m.

CVE-2021-35246

2022-11-2317:15:09

CWE-319

SolarWinds

web.nvd.nist.gov

cve-2021-35246

application

vulnerability

unencrypted connections

ssl

tls

nvd

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

44.5%

JSON

The application fails to prevent users from connecting to it over unencrypted connections. An attacker able to modify a legitimate user’s network traffic could bypass the application’s use of SSL/TLS encryption and use the application as a platform for attacks against its users.

Affected configurations

Nvd

Node

solarwindsengineer\'s_toolsetMatch2020.2.6hotfix_4

VendorProductVersionCPE
solarwindsengineer\'s_toolset2020.2.6cpe:2.3:a:solarwinds:engineer\'s_toolset:2020.2.6:hotfix_4:*:*:*:*:*:*

Vendor	Product	Version	CPE
solarwinds	engineer\'s_toolset	2020.2.6	cpe:2.3:a:solarwinds:engineer\'s_toolset:2020.2.6:hotfix_4::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Engineer's Toolset",
    "vendor": "SolarWinds",
    "versions": [
      {
        "status": "affected",
        "version": "2022.3 and previous versions"
      }
    ]
  }
]

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35246

documentation.solarwinds.com/en/success_center/ets/content/release_notes/ets_2022-4_release_notes.htm

www.solarwinds.com/trust-center/security-advisories/CVE-2021-35246

Social References

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

44.5%

JSON

Related for CVE-2021-35246