Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-40494
HistorySep 03, 2021 - 2:15 a.m.

CVE-2021-40494

2021-09-0302:15:06
CWE-798
[email protected]
web.nvd.nist.gov
3
cve-2021-40494
hardcoded jwt secret key
adaptivescale lxdui
admin access

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

60.7%

JSON

A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin access to the host system.

Affected configurations

Nvd
Node
adaptivescalelxduiRange≤2.1.3
VendorProductVersionCPE
adaptivescalelxdui*cpe:2.3:a:adaptivescale:lxdui:*:*:*:*:*:*:*:*

Related

osv 3
cvelist 1
prion 1
github 1
cve 1
veracode 1
osv
osv
AdaptiveScale LXDUI Hardcoded JWT Secret Key
2022-05-24 19:13:00
PYSEC-2021-342
2021-09-03 02:15:00
CVE-2021-40494
2021-09-03 02:15:06
cvelist
cvelist
CVE-2021-40494
2021-09-03 01:35:26
prion
prion
Hardcoded credentials
2021-09-03 02:15:00
github
github
AdaptiveScale LXDUI Hardcoded JWT Secret Key
2022-05-24 19:13:00
cve
cve
CVE-2021-40494
2021-09-03 02:15:06
veracode
veracode
Privilege Escalation
2021-09-06 05:52:32

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

60.7%

JSON
Related for NVD:CVE-2021-40494
osv3cvelist1prion1github1cve1veracode1