Lucene search

K
cvelistSolarWindsCVELIST:CVE-2021-35251
HistoryMar 09, 2022 - 3:38 p.m.

CVE-2021-35251 Sensitive Data Disclosure Vulnerability

2022-03-0915:38:01
CWE-209
SolarWinds
www.cve.org
2
cve-2021-35251
sensitive information disclosure
technical error message
environmental details

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

33.5%

Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details about the Web Help Desk installation.

CNA Affected

[
  {
    "product": "Web Help Desk",
    "vendor": "SolarWinds",
    "versions": [
      {
        "lessThan": "12.7.8",
        "status": "affected",
        "version": "12.7.7 HF 1 and Previous Versions",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

33.5%

Related for CVELIST:CVE-2021-35251