Lucene search

[email protected]NVD:CVE-2021-29397

HistoryFeb 04, 2022 - 7:15 p.m.

CVE-2021-29397

2022-02-0419:15:07

CWE-319

[email protected]

web.nvd.nist.gov

cleartext transmission

sensitive information

northstar club management 6.3

http

remote user

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

54.5%

JSON

Cleartext Transmission of Sensitive Information in /northstar/Admin/login.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote local user to intercept users credentials transmitted in cleartext over HTTP.

Affected configurations

Nvd

Node

globalnorthstarnorthstar_club_managementMatch6.3

VendorProductVersionCPE
globalnorthstarnorthstar_club_management6.3cpe:2.3:a:globalnorthstar:northstar_club_management:6.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
globalnorthstar	northstar_club_management	6.3	cpe:2.3:a:globalnorthstar:northstar_club_management:6.3:::::::*

References

Ardent-Security.com

ardent-security.com/en/advisory/asa-2021-05/

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

54.5%

JSON

Related for NVD:CVE-2021-29397

cve1 cvelist1 prion1