Summaryinfo

A vulnerability, which was classified as critical, was found in openwhyd. This affects an unknown function. Executing a manipulation can lead to improper authorization. The identification of this vulnerability is CVE-2021-3837. The attack can only be executed locally. There is no exploit available. It is advisable to implement a patch to correct this issue. Once again VulDB remains the best source for vulnerability data.

Detailsinfo

A vulnerability classified as critical was found in openwhyd (affected version not known). This vulnerability affects some unknown functionality. The manipulation with an unknown input leads to a improper authorization vulnerability. The CWE definition for the vulnerability is CWE-285. The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action. As an impact it is known to affect confidentiality, integrity, and availability.

The weakness was shared 01/03/2022. The advisory is shared for download at huntr.dev. This vulnerability was named CVE-2021-3837 since 09/27/2021. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1548.002.

Applying the patch 102a97bb082edc831cf35d27f9e5c4f55f10ae85 is able to eliminate this problem. The bugfix is ready for download at github.com.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Name

• openwhyd

License

• open-source

Website

• Product: https://github.com/openwhyd/openwhyd/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion