Lucene search
K

CVE-2021-21979

🗓️ 03 Mar 2021 16:15:14Reported by vmwareType 
cve
 cve
🔗 web.nvd.nist.gov👁 47 Views🌐 WEB

Bitnami Containers Laravel versions prior to 6.20.0, 7.30.1, and 8.5.11 generate insecure APP_KEY in /tmp/app/.env fil

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2021-21979
3 Mar 202120:45
circl
CNNVD
Bitnami Containers 信任管理问题漏洞
3 Mar 202100:00
cnnvd
Cvelist
CVE-2021-21979
3 Mar 202116:15
cvelist
EUVD
EUVD-2021-9150
3 Oct 202520:07
euvd
NVD
CVE-2021-21979
3 Mar 202117:15
nvd
OSV
CVE-2021-21979
3 Mar 202117:15
osv
Prion
Design/Logic Flaw
3 Mar 202117:15
prion
RedhatCVE
CVE-2021-21979
22 May 202519:12
redhatcve
NVD
Node
bitnamicontainersRange6.0.2-debian-9-r06.0.2-debian-9-r22laravel
OR
bitnamicontainersRange6.4.0-debian-9-r06.4.0-debian-9-r31laravel
OR
bitnamicontainersRange6.5.2-debian-9-r06.5.2-debian-9-r20laravel
OR
bitnamicontainersRange6.8.0-debian-9-r06.8.0-debian-9-r26laravel
OR
bitnamicontainersRange6.12.0-debian-9-r06.12.0-debian-10-r33laravel
OR
bitnamicontainersRange6.18.0-debian-10-r06.18.0-debian-10-r21laravel
OR
bitnamicontainersRange6.18.3-debian-10-r06.18.3-debian-10-r22laravel
OR
bitnamicontainersRange6.18.8-debian-10-r06.18.8-debian-10-r110laravel
OR
bitnamicontainersRange6.18.35-debian-10-r06.18.35-debian-10-r66laravel
OR
bitnamicontainersRange6.20.0-debian-10-r06.20.0-debian-10-r107laravel
OR
bitnamicontainersRange7.0.0-debian-10-r07.0.0-debian-10-r7laravel
OR
bitnamicontainersRange7.3.0-debian-10-r07.3.0-debian-10-r20laravel
OR
bitnamicontainersRange7.6.0-debian-10-r07.6.0-debian-10-r38laravel
OR
bitnamicontainersRange7.12.0-debian-10-r07.12.0-debian-10-r72laravel
OR
bitnamicontainersRange7.25.0-debian-10-r07.25.0-debian-10-r16laravel
OR
bitnamicontainersRange7.28.0-debian-10-r07.28.0-debian-10-r50laravel
OR
bitnamicontainersRange7.30.1-debian-10-r07.30.1-debian-10-r108laravel
OR
bitnamicontainersRange8.0.1-debian-10-r08.0.1-debian-10-r7laravel
OR
bitnamicontainersRange8.0.3-debian-10-r08.0.3-debian-10-r18laravel
OR
bitnamicontainersRange8.1.0-debian-10-r08.1.0-debian-10-r7laravel
OR
bitnamicontainersRange8.2.0-debian-10-r08.2.0-debian-10-r8laravel
OR
bitnamicontainersRange8.4.0-debian-10-r08.4.0-debian-10-r10laravel
OR
bitnamicontainersRange8.4.1-debian-10-r08.4.1-debian-10-r6laravel
OR
bitnamicontainersRange8.4.2-debian-10-r08.4.2-debian-10-r4laravel
OR
bitnamicontainersRange8.4.3-debian-10-r08.4.3-debian-10-r6laravel
OR
bitnamicontainersRange8.4.4-debian-10-r08.4.4-debian-10-r6laravel
OR
bitnamicontainersRange8.5.5-debian-10-r08.5.5-debian-10-r11laravel
OR
bitnamicontainersRange8.5.6-debian-10-r08.5.6-debian-10-r13laravel
OR
bitnamicontainersRange8.5.7-debian-10-r08.5.7-debian-10-r6laravel
OR
bitnamicontainersRange8.5.8-debian-10-r08.5.8-debian-10-r5laravel
OR
bitnamicontainersRange8.5.9-debian-10-r08.5.9-debian-10-r25laravel
OR
bitnamicontainersRange8.5.10-debian-10-r08.5.10-debian-10-r6laravel
OR
bitnamicontainersMatch6.19.0-debian-10-r0laravel
OR
bitnamicontainersMatch7.29.0-debian-10-r0laravel
OR
bitnamicontainersMatch7.30.0-debian-10-r0laravel
OR
bitnamicontainersMatch8.3.0-debian-10-r0laravel
OR
bitnamicontainersMatch8.5.2-debian-10-r0laravel
OR
bitnamicontainersMatch8.5.2-debian-10-r1laravel
OR
bitnamicontainersMatch8.5.3-debian-10-r0laravel
OR
bitnamicontainersMatch8.5.4-debian-10-r0laravel
OR
bitnamicontainersMatch8.5.4-debian-10-r1laravel
[
  {
    "product": "Bitnami Containers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All Laravel container versions prior to: 6.20.0-debian-10-r107 for Laravel 6,  7.30.1-debian-10-r108 for Laravel 7 and 8.5.11-debian-10-r0 for Laravel 8"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
APP_KEYpath/tmp/app/.envIn certain Bitnami Laravel containers, the APP_KEY is fixed in /tmp/app/.env at build time, enabling crafted PHP object serialization/unserialization attacks.CWE-798

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 05:49Current
7.2High risk
Vulners AI Score7.2
CVSS 3.17.3
CVSS 27.5
EPSS0.00132
47