CVE-2021-21606 - Vulnerability Details

Vendors	Products
Jenkins	Jenkins
Redhat	Openshift

Package	CPE	Advisory	Released Date
Red Hat OpenShift Container Platform 3.11
jenkins-0:2.263.3.1612433584-1.el7	cpe:/a:redhat:openshift:3.11::el7	RHSA-2021:0637	2021-03-03T00:00:00Z
Red Hat OpenShift Container Platform 4.5
conmon-2:2.0.21-1.rhaos4.5.el7	cpe:/a:redhat:openshift:4.5::el7	RHSA-2021:0429	2021-03-03T00:00:00Z
jenkins-0:2.263.3.1612434332-1.el7	cpe:/a:redhat:openshift:4.5::el7	RHSA-2021:0429	2021-03-03T00:00:00Z
machine-config-daemon-0:4.5.0-202102050524.p0.git.2594.ff3b8c0.el8	cpe:/a:redhat:openshift:4.5::el7	RHSA-2021:0429	2021-03-03T00:00:00Z
openshift-0:4.5.0-202102050524.p0.git.0.9229406.el7	cpe:/a:redhat:openshift:4.5::el7	RHSA-2021:0429	2021-03-03T00:00:00Z
openshift-ansible-0:4.5.0-202102031005.p0.git.0.c6839a2.el7	cpe:/a:redhat:openshift:4.5::el7	RHSA-2021:0429	2021-03-03T00:00:00Z
openshift-clients-0:4.5.0-202102051529.p0.git.3612.61b096a.el8	cpe:/a:redhat:openshift:4.5::el7	RHSA-2021:0429	2021-03-03T00:00:00Z
runc-0:1.0.0-72.rhaos4.5.giteadfc6b.el8	cpe:/a:redhat:openshift:4.5::el7	RHSA-2021:0429	2021-03-03T00:00:00Z
Red Hat OpenShift Container Platform 4.6
jenkins-0:2.263.3.1612434510-1.el8	cpe:/a:redhat:openshift:4.6::el8	RHSA-2021:0423	2021-02-17T00:00:00Z

Link	Providers
https://nvd.nist.gov/vuln/detail/CVE-2021-21606
https://www.cve.org/CVERecord?id=CVE-2021-21606
https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2023

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Jenkins", "vendor": "Jenkins project", "versions": [{"lessThan": "unspecified", "status": "affected", "version": "2.242", "versionType": "custom"}, {"lessThanOrEqual": "2.274", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThanOrEqual": "LTS 2.263.1", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "Jenkins 2.274 and earlier, LTS 2.263.1 and earlier improperly validates the format of a provided fingerprint ID when checking for its existence allowing an attacker to check for the existence of XML files with a short path."}], "providerMetadata": {"orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b", "shortName": "jenkins", "dateUpdated": "2023-10-24T15:50:24.584Z"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2023"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "jenkinsci-cert@googlegroups.com", "ID": "CVE-2021-21606", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Jenkins", "version": {"version_data": [{"version_affected": ">=", "version_value": "2.242"}, {"version_affected": "<=", "version_value": "2.274"}, {"version_affected": "<=", "version_value": "LTS 2.263.1"}]}}]}, "vendor_name": "Jenkins project"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Jenkins 2.274 and earlier, LTS 2.263.1 and earlier improperly validates the format of a provided fingerprint ID when checking for its existence allowing an attacker to check for the existence of XML files with a short path."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-20: Improper Input Validation"}]}]}, "references": {"reference_data": [{"name": "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2023", "refsource": "CONFIRM", "url": "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2023"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T18:16:23.623Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2023"}]}]}, "cveMetadata": {"assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b", "assignerShortName": "jenkins", "cveId": "CVE-2021-21606", "datePublished": "2021-01-13T15:55:29", "dateReserved": "2021-01-04T00:00:00", "dateUpdated": "2024-08-03T18:16:23.623Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Jenkins (string)

vendor : Jenkins project (string)

versions : [ »

0 : { »

lessThan : unspecified (string)

status : affected (string)

version : 2.242 (string)

versionType : custom (string)

}

1 : { »

lessThanOrEqual : 2.274 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

2 : { »

lessThanOrEqual : LTS 2.263.1 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Jenkins 2.274 and earlier, LTS 2.263.1 and earlier improperly validates the format of a provided fingerprint ID when checking for its existence allowing an attacker to check for the existence of XML files with a short path. (string)

}

]

providerMetadata : { »

orgId : 39769cd5-e6e2-4dc8-927e-97b3aa056f5b (string)

shortName : jenkins (string)

dateUpdated : 2023-10-24T15:50:24.584Z (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2023 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : jenkinsci-cert@googlegroups.com (string)

ID : CVE-2021-21606 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Jenkins (string)

version : { »

version_data : [ »

0 : { »

version_affected : >= (string)

version_value : 2.242 (string)

}

1 : { »

version_affected : <= (string)

version_value : 2.274 (string)

}

2 : { »

version_affected : <= (string)

version_value : LTS 2.263.1 (string)

}

]

}

]

}

vendor_name : Jenkins project (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Jenkins 2.274 and earlier, LTS 2.263.1 and earlier improperly validates the format of a provided fingerprint ID when checking for its existence allowing an attacker to check for the existence of XML files with a short path. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : CWE-20: Improper Input Validation (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2023 (string)

refsource : CONFIRM (string)

url : https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2023 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T18:16:23.623Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2023 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 39769cd5-e6e2-4dc8-927e-97b3aa056f5b (string)

assignerShortName : jenkins (string)

cveId : CVE-2021-21606 (string)

datePublished : 2021-01-13T15:55:29 (string)

dateReserved : 2021-01-04T00:00:00 (string)

dateUpdated : 2024-08-03T18:16:23.623Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*", "matchCriteriaId": "1D0A8DA2-6151-430D-9FC2-1332E25B4E3B", "versionEndIncluding": "2.263.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*", "matchCriteriaId": "9A6F1AB1-BFB3-448F-BDAC-2A3487CBFEB6", "versionEndIncluding": "2.274", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Jenkins 2.274 and earlier, LTS 2.263.1 and earlier improperly validates the format of a provided fingerprint ID when checking for its existence allowing an attacker to check for the existence of XML files with a short path."}, {"lang": "es", "value": "Jenkins versiones 2.274 y anteriores, LTS versiones 2.263.1 y anteriores, comprueban inapropiadamente el formato de una identificaci\u00f3n de huella digital proporcionada al comprobar su existencia, permitiendo a un atacante comprobar la existencia de archivos XML con una ruta corta."}], "id": "CVE-2021-21606", "lastModified": "2024-11-21T05:48:41.270", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-01-13T16:15:13.663", "references": [{"source": "jenkinsci-cert@googlegroups.com", "tags": ["Vendor Advisory"], "url": "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2023"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2023"}], "sourceIdentifier": "jenkinsci-cert@googlegroups.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:* (string)

matchCriteriaId : 1D0A8DA2-6151-430D-9FC2-1332E25B4E3B (string)

versionEndIncluding : 2.263.1 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:* (string)

matchCriteriaId : 9A6F1AB1-BFB3-448F-BDAC-2A3487CBFEB6 (string)

versionEndIncluding : 2.274 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Jenkins 2.274 and earlier, LTS 2.263.1 and earlier improperly validates the format of a provided fingerprint ID when checking for its existence allowing an attacker to check for the existence of XML files with a short path. (string)

}

1 : { »

lang : es (string)

value : Jenkins versiones 2.274 y anteriores, LTS versiones 2.263.1 y anteriores, comprueban inapropiadamente el formato de una identificación de huella digital proporcionada al comprobar su existencia, permitiendo a un atacante comprobar la existencia de archivos XML con una ruta corta. (string)

}

]

id : CVE-2021-21606 (string)

lastModified : 2024-11-21T05:48:41.270 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : SINGLE (string)

availabilityImpact : NONE (string)

baseScore : 4 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:S/C:P/I:N/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 8 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 4.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 1.4 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2021-01-13T16:15:13.663 (string)

references : [ »

0 : { »

source : jenkinsci-cert@googlegroups.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2023 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2023 (string)

}

]

sourceIdentifier : jenkinsci-cert@googlegroups.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-20 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Show plain JSON

{"affected_release": [{"advisory": "RHSA-2021:0637", "cpe": "cpe:/a:redhat:openshift:3.11::el7", "package": "jenkins-0:2.263.3.1612433584-1.el7", "product_name": "Red Hat OpenShift Container Platform 3.11", "release_date": "2021-03-03T00:00:00Z"}, {"advisory": "RHSA-2021:0429", "cpe": "cpe:/a:redhat:openshift:4.5::el7", "package": "conmon-2:2.0.21-1.rhaos4.5.el7", "product_name": "Red Hat OpenShift Container Platform 4.5", "release_date": "2021-03-03T00:00:00Z"}, {"advisory": "RHSA-2021:0429", "cpe": "cpe:/a:redhat:openshift:4.5::el7", "package": "jenkins-0:2.263.3.1612434332-1.el7", "product_name": "Red Hat OpenShift Container Platform 4.5", "release_date": "2021-03-03T00:00:00Z"}, {"advisory": "RHSA-2021:0429", "cpe": "cpe:/a:redhat:openshift:4.5::el7", "package": "machine-config-daemon-0:4.5.0-202102050524.p0.git.2594.ff3b8c0.el8", "product_name": "Red Hat OpenShift Container Platform 4.5", "release_date": "2021-03-03T00:00:00Z"}, {"advisory": "RHSA-2021:0429", "cpe": "cpe:/a:redhat:openshift:4.5::el7", "package": "openshift-0:4.5.0-202102050524.p0.git.0.9229406.el7", "product_name": "Red Hat OpenShift Container Platform 4.5", "release_date": "2021-03-03T00:00:00Z"}, {"advisory": "RHSA-2021:0429", "cpe": "cpe:/a:redhat:openshift:4.5::el7", "package": "openshift-ansible-0:4.5.0-202102031005.p0.git.0.c6839a2.el7", "product_name": "Red Hat OpenShift Container Platform 4.5", "release_date": "2021-03-03T00:00:00Z"}, {"advisory": "RHSA-2021:0429", "cpe": "cpe:/a:redhat:openshift:4.5::el7", "package": "openshift-clients-0:4.5.0-202102051529.p0.git.3612.61b096a.el8", "product_name": "Red Hat OpenShift Container Platform 4.5", "release_date": "2021-03-03T00:00:00Z"}, {"advisory": "RHSA-2021:0429", "cpe": "cpe:/a:redhat:openshift:4.5::el7", "package": "runc-0:1.0.0-72.rhaos4.5.giteadfc6b.el8", "product_name": "Red Hat OpenShift Container Platform 4.5", "release_date": "2021-03-03T00:00:00Z"}, {"advisory": "RHSA-2021:0423", "cpe": "cpe:/a:redhat:openshift:4.6::el8", "package": "jenkins-0:2.263.3.1612434510-1.el8", "product_name": "Red Hat OpenShift Container Platform 4.6", "release_date": "2021-02-17T00:00:00Z"}], "bugzilla": {"description": "jenkins: Arbitrary file existence check in file fingerprints", "id": "1925159", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1925159"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "status": "verified"}, "cwe": "CWE-20", "details": ["Jenkins 2.274 and earlier, LTS 2.263.1 and earlier improperly validates the format of a provided fingerprint ID when checking for its existence allowing an attacker to check for the existence of XML files with a short path."], "name": "CVE-2021-21606", "package_state": [{"cpe": "cpe:/a:redhat:jboss_fuse:7", "fix_state": "Not affected", "package_name": "jenkins", "product_name": "Red Hat Fuse 7"}], "public_date": "2021-01-13T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2021-21606\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-21606"], "threat_severity": "Moderate"}

{

affected_release : [ »

0 : { »

advisory : RHSA-2021:0637 (string)

cpe : cpe:/a:redhat:openshift:3.11::el7 (string)

package : jenkins-0:2.263.3.1612433584-1.el7 (string)

product_name : Red Hat OpenShift Container Platform 3.11 (string)

release_date : 2021-03-03T00:00:00Z (string)

}

1 : { »

advisory : RHSA-2021:0429 (string)

cpe : cpe:/a:redhat:openshift:4.5::el7 (string)

package : conmon-2:2.0.21-1.rhaos4.5.el7 (string)

product_name : Red Hat OpenShift Container Platform 4.5 (string)

release_date : 2021-03-03T00:00:00Z (string)

}

2 : { »

advisory : RHSA-2021:0429 (string)

cpe : cpe:/a:redhat:openshift:4.5::el7 (string)

package : jenkins-0:2.263.3.1612434332-1.el7 (string)

product_name : Red Hat OpenShift Container Platform 4.5 (string)

release_date : 2021-03-03T00:00:00Z (string)

}

3 : { »

advisory : RHSA-2021:0429 (string)

cpe : cpe:/a:redhat:openshift:4.5::el7 (string)

package : machine-config-daemon-0:4.5.0-202102050524.p0.git.2594.ff3b8c0.el8 (string)

product_name : Red Hat OpenShift Container Platform 4.5 (string)

release_date : 2021-03-03T00:00:00Z (string)

}

4 : { »

advisory : RHSA-2021:0429 (string)

cpe : cpe:/a:redhat:openshift:4.5::el7 (string)

package : openshift-0:4.5.0-202102050524.p0.git.0.9229406.el7 (string)

product_name : Red Hat OpenShift Container Platform 4.5 (string)

release_date : 2021-03-03T00:00:00Z (string)

}

5 : { »

advisory : RHSA-2021:0429 (string)

cpe : cpe:/a:redhat:openshift:4.5::el7 (string)

package : openshift-ansible-0:4.5.0-202102031005.p0.git.0.c6839a2.el7 (string)

product_name : Red Hat OpenShift Container Platform 4.5 (string)

release_date : 2021-03-03T00:00:00Z (string)

}

6 : { »

advisory : RHSA-2021:0429 (string)

cpe : cpe:/a:redhat:openshift:4.5::el7 (string)

package : openshift-clients-0:4.5.0-202102051529.p0.git.3612.61b096a.el8 (string)

product_name : Red Hat OpenShift Container Platform 4.5 (string)

release_date : 2021-03-03T00:00:00Z (string)

}

7 : { »

advisory : RHSA-2021:0429 (string)

cpe : cpe:/a:redhat:openshift:4.5::el7 (string)

package : runc-0:1.0.0-72.rhaos4.5.giteadfc6b.el8 (string)

product_name : Red Hat OpenShift Container Platform 4.5 (string)

release_date : 2021-03-03T00:00:00Z (string)

}

8 : { »

advisory : RHSA-2021:0423 (string)

cpe : cpe:/a:redhat:openshift:4.6::el8 (string)

package : jenkins-0:2.263.3.1612434510-1.el8 (string)

product_name : Red Hat OpenShift Container Platform 4.6 (string)

release_date : 2021-02-17T00:00:00Z (string)

}

]

bugzilla : { »

description : jenkins: Arbitrary file existence check in file fingerprints (string)

id : 1925159 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=1925159 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 4.3 (string)

cvss3_scoring_vector : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N (string)

status : verified (string)

}

cwe : CWE-20 (string)

details : [ »

0 : Jenkins 2.274 and earlier, LTS 2.263.1 and earlier improperly validates the format of a provided fingerprint ID when checking for its existence allowing an attacker to check for the existence of XML files with a short path. (string)

]

name : CVE-2021-21606 (string)

package_state : [ »

0 : { »

cpe : cpe:/a:redhat:jboss_fuse:7 (string)

fix_state : Not affected (string)

package_name : jenkins (string)

product_name : Red Hat Fuse 7 (string)

}

]

public_date : 2021-01-13T00:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2021-21606 https://nvd.nist.gov/vuln/detail/CVE-2021-21606 (string)

]

threat_severity : Moderate (string)

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object