Lucene search

[email protected]CVE-2021-43708

HistoryApr 21, 2022 - 7:15 p.m.

CVE-2021-43708

2022-04-2119:15:08

CWE-281

[email protected]

web.nvd.nist.gov

cve-2021-43708

titus classification suite

labeling tool

excel safe mode

nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

The Labeling tool in Titus Classification Suite 18.8.1910.140 allows users to avoid the generation of a classification label by using Excel’s safe mode.

Affected configurations

NVD

Node

helpsystemstitus_data_classificationMatch18.8.1910.140

CPENameOperatorVersion
helpsystems:titus_data_classificationhelpsystems titus data classificationeq18.8.1910.140

CPE	Name	Operator	Version
helpsystems:titus_data_classification	helpsystems titus data classification	eq	18.8.1910.140

References

medium.com/%40way2goraj/bypass-data-classification-labelling-tool-aa037ff86dee

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2021-43708

prion1 cvelist1 nvd1