Lucene search

K
osvGoogleOSV:CVE-2021-41767
HistoryJan 11, 2022 - 10:15 p.m.

CVE-2021-41767

2022-01-1122:15:07
Google
osv.dev
7
apache guacamole
security
vulnerability
rest
user permission
access

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

17.4%

Apache Guacamole 1.3.0 and older may incorrectly include a private tunnel identifier in the non-private details of some REST responses. This may allow an authenticated user who already has permission to access a particular connection to read from or interact with another user’s active use of that same connection.

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

17.4%