CVE-2021-44674

2022-01-0313:15:09

Google

osv.dev

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.5%

JSON

An information exposure issue has been discovered in Opmantek Open-AudIT 4.2.0. The vulnerability allows an authenticated attacker to read file outside of the restricted directory.

CPENameOperatorVersion
open-auditeqOpen-AudIT_2.0.6
open-auditeqOpen-AudIT_2.2.1
open-auditeqOpen-AudIT_2.2.0
open-auditeqOpen-AudIT_2.0.2
open-auditeqOpen-AudIT_2.0.6_beta
open-auditeqOpen-AudIT_2.3.0
open-auditeqOpen-AudIT_3.1.0
open-auditeqOpen-AudIT_3.2.2
open-auditeqOpen-AudIT_4.1.2
open-auditeqOpen-AudIT_1.12.8

Name	Operator	Version
open-audit	eq	Open-AudIT_2.0.6
open-audit	eq	Open-AudIT_2.2.1
open-audit	eq	Open-AudIT_2.2.0
open-audit	eq	Open-AudIT_2.0.2
open-audit	eq	Open-AudIT_2.0.6_beta
open-audit	eq	Open-AudIT_2.3.0
open-audit	eq	Open-AudIT_3.1.0
open-audit	eq	Open-AudIT_3.2.2
open-audit	eq	Open-AudIT_4.1.2
open-audit	eq	Open-AudIT_1.12.8