Lucene search
HCLCVELIST:CVE-2021-27779HistoryMay 25, 2022 - 3:20 p.m.
CVE-2021-27779 A Security Misconfiguration vulnerability affects HCL VersionVault Express
2022-05-2515:20:16
CWE-311
HCL
www.cve.org
6
cve-2021-27779
hcl versionvault express
security misconfiguration
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
AI Score
9.2
Confidence
High
EPSS
0.002
Percentile
51.7%
VersionVault Express exposes sensitive information that an attacker can use to impersonate the server or eavesdrop on communications with the server.
CNA Affected
[
{
"product": "HCL VersionVault Express",
"vendor": "HCL Software",
"versions": [
{
"status": "affected",
"version": "2.0.x"
}
]
}
]Related
prion
prion
Code injection
2022-05-25 17:15:00
cnvd
cnvd
HCL Technologies VersionVault Express Information Disclosure Vulnerability
2022-05-30 00:00:00
nvd
nvd
CVE-2021-27779
2022-05-25 17:15:07
cve
cve
CVE-2021-27779
2022-05-25 17:15:07
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
AI Score
9.2
Confidence
High
EPSS
0.002
Percentile
51.7%
Related for CVELIST:CVE-2021-27779