Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2021-41767HistoryJan 11, 2022 - 10:15 p.m.
CVE-2021-41767
2022-01-1122:15:00
Debian Security Bug Tracker
security-tracker.debian.org
12
apache guacamole
1.3.0
vulnerability
private tunnel
leakage
rest
permissions
user interaction
unix
EPSS
0.001
Percentile
17.4%
Apache Guacamole 1.3.0 and older may incorrectly include a private tunnel identifier in the non-private details of some REST responses. This may allow an authenticated user who already has permission to access a particular connection to read from or interact with another user’s active use of that same connection.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | guacamole-client | <= 0.9.9+dfsg-1 | guacamole-client_0.9.9+dfsg-1_all.deb |
Related
osv
osv
BIT-guacamole-2021-41767
2024-03-06 10:53:35
BIT-guacamole-server-2021-41767
2024-03-06 10:53:36
CVE-2021-41767
2022-01-11 22:15:07
nvd
nvd
CVE-2021-41767
2022-01-11 22:15:07
cve
cve
CVE-2021-41767
2022-01-11 22:15:07
prion
prion
Design/Logic Flaw
2022-01-11 22:15:00
ubuntucve
ubuntucve
CVE-2021-41767
2022-01-11 00:00:00
veracode
veracode
Information Disclosure
2022-01-12 04:47:53
cvelist
cvelist
cnvd
cnvd
Apache Guacamole Information Disclosure Vulnerability (CNVD-2022-04988)
2022-01-12 00:00:00
openvas
openvas
Apache Guacamole < 1.4.0 Multiple Vulnerabilities
2022-01-12 00:00:00