CVE-2021-4258

2022-12-1914:15:10

CWE-310

CWE-319

[email protected]

web.nvd.nist.gov

vulnerability

whohas

cleartext transmission

sensitive information

remote attack

patch

vdb-216251

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

53.7%

JSON

A vulnerability was found in whohas. It has been rated as problematic. This issue affects some unknown processing of the component Package Information Handler. The manipulation leads to cleartext transmission of sensitive information. The attack may be initiated remotely. The real existence of this vulnerability is still doubted at the moment. The name of the patch is 667c3e2e9178f15c23d7918b5db25cd0792c8472. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216251. NOTE: Most sources redirect to the encrypted site which limits the possibilities of an attack.

Affected configurations

NVD

Node

whohas_projectwhohasRange<2021-11-01

CPENameOperatorVersion
whohas_project:whohaswhohas project whohaslt2021-11-01

CPE	Name	Operator	Version
whohas_project:whohas	whohas project whohas	lt	2021-11-01

CNA Affected

[
  {
    "vendor": "unspecified",
    "product": "whohas",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]